Описание
The HTTPS fallback implementation in Shell In A Box (aka shellinabox) before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL.
Ссылки
- Vendor Advisory
- Patch
- Vendor Advisory
- Patch
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*
Конфигурация 2Версия до 2.18 (включая)
cpe:2.3:a:shellinabox_project:shellinabox:*:*:*:*:*:*:*:*
EPSS
Процентиль: 68%
0.00556
Низкий
7.4 High
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-254
Связанные уязвимости
CVSS3: 7.4
ubuntu
около 10 лет назад
The HTTPS fallback implementation in Shell In A Box (aka shellinabox) before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL.
CVSS3: 7.4
debian
около 10 лет назад
The HTTPS fallback implementation in Shell In A Box (aka shellinabox) ...
CVSS3: 7.4
github
больше 3 лет назад
The HTTPS fallback implementation in Shell In A Box (aka shellinabox) before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL.
EPSS
Процентиль: 68%
0.00556
Низкий
7.4 High
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-254