Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-525h-hfxr-w785

Опубликовано: 21 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.6

Описание

Due to insufficient verification, an attacker could use a malicious client to bypass authentication checks and run RPC commands in a region. This has been addressed in MAAS and updated in the corresponding snaps.

Due to insufficient verification, an attacker could use a malicious client to bypass authentication checks and run RPC commands in a region. This has been addressed in MAAS and updated in the corresponding snaps.

EPSS

Процентиль: 30%
0.00109
Низкий

9.6 Critical

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 9.6
ubuntu
7 месяцев назад

Due to insufficient verification, an attacker could use a malicious client to bypass authentication checks and run RPC commands in a region. This has been addressed in MAAS and updated in the corresponding snaps.

CVSS3: 9.6
nvd
7 месяцев назад

Due to insufficient verification, an attacker could use a malicious client to bypass authentication checks and run RPC commands in a region. This has been addressed in MAAS and updated in the corresponding snaps.

CVSS3: 9.8
fstec
больше 1 года назад

Уязвимость механизма аутентификации системы управления серверами MAAS, позволяющая нарушителю повысить свои привилегии и выполнить произвольный код

EPSS

Процентиль: 30%
0.00109
Низкий

9.6 Critical

CVSS3

Дефекты

CWE-287