Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7fj2-f693-x66w

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to write the miner configuration file to arbitrary locations on the server due to missing basedir restrictions (absolute directory traversal).

The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to write the miner configuration file to arbitrary locations on the server due to missing basedir restrictions (absolute directory traversal).

EPSS

Процентиль: 66%
0.00527
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 7 лет назад

The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to write the miner configuration file to arbitrary locations on the server due to missing basedir restrictions (absolute directory traversal).

CVSS3: 6.5
nvd
больше 7 лет назад

The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to write the miner configuration file to arbitrary locations on the server due to missing basedir restrictions (absolute directory traversal).

CVSS3: 6.5
debian
больше 7 лет назад

The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 a ...

EPSS

Процентиль: 66%
0.00527
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-22