Описание
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.2 could allow a privileged user to install a potentially dangerous tar file, which could give them access to subsequent systems where the package was installed. IBM X-Force ID: 283986.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 2.0 (включая) до 2.0.3 (исключая)
Одновременно
cpe:2.3:a:ibm:storage_defender_resiliency_service:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
EPSS
Процентиль: 9%
0.00033
Низкий
6.4 Medium
CVSS3
6.8 Medium
CVSS3
Дефекты
CWE-749
NVD-CWE-Other
Связанные уязвимости
CVSS3: 6.4
github
почти 2 года назад
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.2 could allow a privileged user to install a potentially dangerous tar file, which could give them access to subsequent systems where the package was installed. IBM X-Force ID: 283986.
EPSS
Процентиль: 9%
0.00033
Низкий
6.4 Medium
CVSS3
6.8 Medium
CVSS3
Дефекты
CWE-749
NVD-CWE-Other