Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p83h-g6jw-gh8f

Опубликовано: 03 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.3

Описание

iTerm2 3.5.6 through 3.5.10 before 3.5.11 sometimes allows remote attackers to obtain sensitive information from terminal commands by reading the /tmp/framer.txt file. This can occur for certain it2ssh and SSH Integration configurations, during remote logins to hosts that have a common Python installation.

iTerm2 3.5.6 through 3.5.10 before 3.5.11 sometimes allows remote attackers to obtain sensitive information from terminal commands by reading the /tmp/framer.txt file. This can occur for certain it2ssh and SSH Integration configurations, during remote logins to hosts that have a common Python installation.

EPSS

Процентиль: 36%
0.00151
Низкий

9.3 Critical

CVSS3

Дефекты

CWE-532

Связанные уязвимости

CVSS3: 9.3
nvd
около 1 года назад

iTerm2 3.5.6 through 3.5.10 before 3.5.11 sometimes allows remote attackers to obtain sensitive information from terminal commands by reading the /tmp/framer.txt file. This can occur for certain it2ssh and SSH Integration configurations, during remote logins to hosts that have a common Python installation.

EPSS

Процентиль: 36%
0.00151
Низкий

9.3 Critical

CVSS3

Дефекты

CWE-532