Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hhx3-g956-h93h

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

An issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3 and all 260.x versions. In certain cases an authenticated Director user can provide a malicious checksum that could allow them to escalate their privileges on the Director VM, aka "BOSH Director Shell Injection Vulnerabilities."

An issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3 and all 260.x versions. In certain cases an authenticated Director user can provide a malicious checksum that could allow them to escalate their privileges on the Director VM, aka "BOSH Director Shell Injection Vulnerabilities."

EPSS

Процентиль: 42%
0.002
Низкий

8.8 High

CVSS3

Дефекты

CWE-354

Связанные уязвимости

CVSS3: 8.8
nvd
больше 8 лет назад

An issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3 and all 260.x versions. In certain cases an authenticated Director user can provide a malicious checksum that could allow them to escalate their privileges on the Director VM, aka "BOSH Director Shell Injection Vulnerabilities."

EPSS

Процентиль: 42%
0.002
Низкий

8.8 High

CVSS3

Дефекты

CWE-354