Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g9g5-cp8f-6wch

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

AMP Application Deployment Service in CubeCoders AMP 2.1.x before 2.1.1.2 allows a remote, authenticated user to open ports in the local system firewall by crafting an HTTP(S) request directly to the applicable API endpoint (despite not having permission to make changes to the system's network configuration).

AMP Application Deployment Service in CubeCoders AMP 2.1.x before 2.1.1.2 allows a remote, authenticated user to open ports in the local system firewall by crafting an HTTP(S) request directly to the applicable API endpoint (despite not having permission to make changes to the system's network configuration).

EPSS

Процентиль: 36%
0.00151
Низкий

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 6.5
nvd
почти 5 лет назад

AMP Application Deployment Service in CubeCoders AMP 2.1.x before 2.1.1.2 allows a remote, authenticated user to open ports in the local system firewall by crafting an HTTP(S) request directly to the applicable API endpoint (despite not having permission to make changes to the system's network configuration).

EPSS

Процентиль: 36%
0.00151
Низкий

Дефекты

CWE-863