Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jjrr-rj68-xhw3

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

A vulnerability in the hxterm service of Cisco HyperFlex Software could allow an unauthenticated, local attacker to gain root access to all nodes in the cluster. The vulnerability is due to insufficient authentication controls. An attacker could exploit this vulnerability by connecting to the hxterm service as a non-privileged, local user. A successful exploit could allow the attacker to gain root access to all member nodes of the HyperFlex cluster. This vulnerability affects Cisco HyperFlex Software Releases prior to 3.5(2a).

A vulnerability in the hxterm service of Cisco HyperFlex Software could allow an unauthenticated, local attacker to gain root access to all nodes in the cluster. The vulnerability is due to insufficient authentication controls. An attacker could exploit this vulnerability by connecting to the hxterm service as a non-privileged, local user. A successful exploit could allow the attacker to gain root access to all member nodes of the HyperFlex cluster. This vulnerability affects Cisco HyperFlex Software Releases prior to 3.5(2a).

EPSS

Процентиль: 60%
0.00398
Низкий

7.8 High

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 7.8
nvd
почти 7 лет назад

A vulnerability in the hxterm service of Cisco HyperFlex Software could allow an unauthenticated, local attacker to gain root access to all nodes in the cluster. The vulnerability is due to insufficient authentication controls. An attacker could exploit this vulnerability by connecting to the hxterm service as a non-privileged, local user. A successful exploit could allow the attacker to gain root access to all member nodes of the HyperFlex cluster. This vulnerability affects Cisco HyperFlex Software Releases prior to 3.5(2a).

CVSS3: 8.1
fstec
почти 7 лет назад

Уязвимость компонента hxterm service гиперконвергентной инфраструктуры Cisco HyperFlex, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 60%
0.00398
Низкий

7.8 High

CVSS3

Дефекты

CWE-287