Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6mqq-2gc9-7j3v

Опубликовано: 30 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

USU Oracle Optimization before 5.17.5 allows authenticated DataCollection users to achieve agent root access because some common OS commands are blocked but (for example) an OS command for base64 decoding is not blocked. NOTE: this is not an Oracle Corporation product.

USU Oracle Optimization before 5.17.5 allows authenticated DataCollection users to achieve agent root access because some common OS commands are blocked but (for example) an OS command for base64 decoding is not blocked. NOTE: this is not an Oracle Corporation product.

EPSS

Процентиль: 73%
0.0075
Низкий

8.8 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 8.8
nvd
почти 4 года назад

USU Oracle Optimization before 5.17.5 allows authenticated DataCollection users to achieve agent root access because some common OS commands are blocked but (for example) an OS command for base64 decoding is not blocked. NOTE: this is not an Oracle Corporation product.

EPSS

Процентиль: 73%
0.0075
Низкий

8.8 High

CVSS3

Дефекты

CWE-78