Описание
maas-import-pxe-files in MAAS before 13.10 does not verify the integrity of downloaded files, which allows remote attackers to modify these files via a man-in-the-middle (MITM) attack.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | |
| lucid | DNE | |
| precise | released | 1.2+bzr1373+dfsg-0ubuntu1~12.04.4 |
| quantal | released | 1.2+bzr1373+dfsg-0ubuntu1.1 |
| raring | released | 1.3+bzr1461+dfsg-0ubuntu2.3 |
| saucy | not-affected | |
| upstream | needs-triage |
Показывать по
10
EPSS
Процентиль: 79%
0.01936
Низкий
5.8 Medium
CVSS2
Связанные уязвимости
nvd
почти 13 лет назад
maas-import-pxe-files in MAAS before 13.10 does not verify the integrity of downloaded files, which allows remote attackers to modify these files via a man-in-the-middle (MITM) attack.
github
больше 4 лет назад
maas-import-pxe-files in MAAS before 13.10 does not verify the integrity of downloaded files, which allows remote attackers to modify these files via a man-in-the-middle (MITM) attack.
EPSS
Процентиль: 79%
0.01936
Низкий
5.8 Medium
CVSS2