Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p373-jqfm-j6wr

Опубликовано: 20 окт. 2022
Источник: github
Github: Прошло ревью
CVSS3: 9.8

Описание

Shinken Solutions Shinken Monitoring vulnerable to Incorrect Access Control

Shinken Solutions Shinken Monitoring Version 2.4.3 affected is vulnerable to Incorrect Access Control. The SafeUnpickler class found in shinken/safepickle.py implements a weak authentication scheme when unserializing objects passed from monitoring nodes to the Shinken monitoring server.

Пакеты

Наименование

Shinken

pip
Затронутые версииВерсия исправления

<= 2.4.3

Отсутствует

EPSS

Процентиль: 93%
0.09428
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 3 лет назад

Shinken Solutions Shinken Monitoring Version 2.4.3 affected is vulnerable to Incorrect Access Control. The SafeUnpickler class found in shinken/safepickle.py implements a weak authentication scheme when unserializing objects passed from monitoring nodes to the Shinken monitoring server.

CVSS3: 9.8
nvd
больше 3 лет назад

Shinken Solutions Shinken Monitoring Version 2.4.3 affected is vulnerable to Incorrect Access Control. The SafeUnpickler class found in shinken/safepickle.py implements a weak authentication scheme when unserializing objects passed from monitoring nodes to the Shinken monitoring server.

EPSS

Процентиль: 93%
0.09428
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-287