Описание
A user with vpuser credentials that opens an SSH connection to the device, gets a restricted shell rbash that allows only a small list of allowed commands. This vulnerability enables the user to get a full-featured Linux shell, bypassing the rbash restrictions.
EPSS
Процентиль: 10%
0.00034
Низкий
4.1 Medium
CVSS3
Дефекты
CWE-653
Связанные уязвимости
CVSS3: 4.1
github
7 месяцев назад
Restricted shell rbash evasion in Radiflow iSAP Smart Collector (CentOS 7 - VSAP 1.20) allows the user vpuser to start a full-feature shell. A user with vpuser credentials that opens an SSH connection to the device, gets a restricted shell rbash that allows only a small list of allowed commands. This vulnerability enables the user to get a full-featured Linux shell, bypassing the rbash restrictions.
EPSS
Процентиль: 10%
0.00034
Низкий
4.1 Medium
CVSS3
Дефекты
CWE-653