Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j5rr-cpp9-c4r6

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.7

Описание

Dropbear before 2017.75 might allow local users to read certain files as root, if the file has the authorized_keys file format with a command= option. This occurs because ~/.ssh/authorized_keys is read with root privileges and symlinks are followed.

Dropbear before 2017.75 might allow local users to read certain files as root, if the file has the authorized_keys file format with a command= option. This occurs because ~/.ssh/authorized_keys is read with root privileges and symlinks are followed.

EPSS

Процентиль: 24%
0.00083
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 4.7
ubuntu
больше 8 лет назад

Dropbear before 2017.75 might allow local users to read certain files as root, if the file has the authorized_keys file format with a command= option. This occurs because ~/.ssh/authorized_keys is read with root privileges and symlinks are followed.

CVSS3: 4.7
nvd
больше 8 лет назад

Dropbear before 2017.75 might allow local users to read certain files as root, if the file has the authorized_keys file format with a command= option. This occurs because ~/.ssh/authorized_keys is read with root privileges and symlinks are followed.

CVSS3: 4.7
debian
больше 8 лет назад

Dropbear before 2017.75 might allow local users to read certain files ...

CVSS3: 4.7
fstec
больше 8 лет назад

Уязвимость модуля /.ssh/authorized_keys пакета программ для организации сеансов связи по протоколу SSH Dropbear, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 24%
0.00083
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-732