CVE-2016-2363

Опубликовано: 20 июн. 2016

Источник: nvd

CVSS3: 7.8

CVSS2: 7.2

EPSS Низкий

Описание

Fonality (previously trixbox Pro) 12.6 through 14.1i before 2016-06-01 uses weak permissions for the /var/www/rpc/surun script, which allows local users to obtain root access for unspecified command execution by leveraging access to the nobody account.

Ссылки

http://www.kb.cert.org/vuls/id/754056
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/754056
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:fonality:fonality:12.6:*:*:*:*:*:*:*

cpe:2.3:a:fonality:fonality:12.8:*:*:*:*:*:*:*

cpe:2.3:a:fonality:fonality:14.1i:*:*:*:*:*:*:*

EPSS

Процентиль: 29%

0.00104

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-8qhv-pgj9-3529