Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4w79-7ch5-4xhw

Опубликовано: 26 нояб. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Insecure permissions in fail2ban-client v0.11.2 allows attackers with limited sudo privileges to perform arbitrary operations as root.

Insecure permissions in fail2ban-client v0.11.2 allows attackers with limited sudo privileges to perform arbitrary operations as root.

EPSS

Процентиль: 19%
0.00061
Низкий

8.8 High

CVSS3

Дефекты

CWE-266

Связанные уязвимости

CVSS3: 8.8
nvd
2 месяца назад

Insecure permissions in fail2ban-client v0.11.2 allows attackers with limited sudo privileges to perform arbitrary operations as root. NOTE: this is disputed by multiple parties because the action for a triggered rule can legitimately be an arbitrary operation as root. Thus, the software is behaving in accordance with its intended privilege model.

CVSS3: 8.8
debian
2 месяца назад

Insecure permissions in fail2ban-client v0.11.2 allows attackers with ...

EPSS

Процентиль: 19%
0.00061
Низкий

8.8 High

CVSS3

Дефекты

CWE-266