CVE-2015-3163

Опубликовано: 06 сент. 2017

Источник: nvd

CVSS3: 4.3

CVSS2: 4

EPSS Низкий

Описание

The admin pages for power types and key types in Beaker before 20.1 do not have any access controls, which allows remote authenticated users to modify power types and key types via navigating to $BEAKER/powertypes and $BEAKER/keytypes respectively.

Ссылки

http://www.openwall.com/lists/oss-security/2015/05/08/1
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/74567
Third Party Advisory
VDB Entry
https://beaker-project.org/jenkins-results/beaker-review-checks-docs/995/documentation/_build/html/whats-new/release-20.html
Release Notes
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1215034
Exploit
Issue Tracking
Patch
Third Party Advisory
VDB Entry
http://www.openwall.com/lists/oss-security/2015/05/08/1
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/74567
Third Party Advisory
VDB Entry
https://beaker-project.org/jenkins-results/beaker-review-checks-docs/995/documentation/_build/html/whats-new/release-20.html
Release Notes
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1215034
Exploit
Issue Tracking
Patch
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:redhat:beaker:*:*:*:*:*:*:*:*

Версия до 19.3 (включая)

cpe:2.3:a:redhat:beaker:20.0:-:*:*:*:*:*:*

cpe:2.3:a:redhat:beaker:20.0:rc1:*:*:*:*:*:*

EPSS

Процентиль: 64%

0.00462

Низкий

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-284

Связанные уязвимости

GHSA-xmgx-c8hv-cpmg