Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g34m-cm8j-m5gg

Опубликовано: 15 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 4.6
CVSS3: 5.7

Описание

When a user attempts to initialize the rSeries FIPS module using a password with special shell metacharacters, the FIPS hardware security module (HSM) may fail to initialize.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

When a user attempts to initialize the rSeries FIPS module using a password with special shell metacharacters, the FIPS hardware security module (HSM) may fail to initialize.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

EPSS

Процентиль: 12%
0.0004
Низкий

4.6 Medium

CVSS4

5.7 Medium

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 4.6
nvd
4 месяца назад

When a highly-privileged, authenticated attacker attempts to initialize the rSeries FIPS module using a password with special shell metacharacters, arbitrary system commands may be executed, and the FIPS hardware security module (HSM) may fail to initialize. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

EPSS

Процентиль: 12%
0.0004
Низкий

4.6 Medium

CVSS4

5.7 Medium

CVSS3

Дефекты

CWE-78