Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wwjg-89vg-gfhh

Опубликовано: 09 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.1

Описание

Restricted shell rbash evasion in Radiflow iSAP Smart Collector (CentOS 7 - VSAP 1.20) allows the user vpuser to start a full-feature shell.

A user with vpuser credentials that opens an SSH connection to the device, gets a restricted shell rbash that allows only a small list of allowed commands. This vulnerability enables the user to get a full-featured Linux shell, bypassing the rbash restrictions.

Restricted shell rbash evasion in Radiflow iSAP Smart Collector (CentOS 7 - VSAP 1.20) allows the user vpuser to start a full-feature shell.

A user with vpuser credentials that opens an SSH connection to the device, gets a restricted shell rbash that allows only a small list of allowed commands. This vulnerability enables the user to get a full-featured Linux shell, bypassing the rbash restrictions.

EPSS

Процентиль: 11%
0.00036
Низкий

4.1 Medium

CVSS3

Дефекты

CWE-653

Связанные уязвимости

CVSS3: 4.1
nvd
7 месяцев назад

A user with vpuser credentials that opens an SSH connection to the device, gets a restricted shell rbash that allows only a small list of allowed commands. This vulnerability enables the user to get a full-featured Linux shell, bypassing the rbash restrictions.

EPSS

Процентиль: 11%
0.00036
Низкий

4.1 Medium

CVSS3

Дефекты

CWE-653