Количество 7
Количество 7
CVE-2019-19191
Shibboleth Service Provider (SP) 3.x before 3.1.0 shipped a spec file that calls chown on files in a directory controlled by the service user (the shibd account) after installation. This allows the user to escalate to root by pointing symlinks to files such as /etc/shadow.
CVE-2019-19191
Shibboleth Service Provider (SP) 3.x before 3.1.0 shipped a spec file that calls chown on files in a directory controlled by the service user (the shibd account) after installation. This allows the user to escalate to root by pointing symlinks to files such as /etc/shadow.
CVE-2019-19191
Shibboleth Service Provider (SP) 3.x before 3.1.0 shipped a spec file ...
openSUSE-SU-2020:0020-1
Security update for shibboleth-sp
SUSE-SU-2020:0115-1
Security update for shibboleth-sp
SUSE-SU-2019:3386-1
Security update for shibboleth-sp
GHSA-gcm7-32c7-5wrq
Shibboleth Service Provider (SP) 3.x before 3.1.0 shipped a spec file that calls chown on files in a directory controlled by the service user (the shibd account) after installation. This allows the user to escalate to root by pointing symlinks to files such as /etc/shadow.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2019-19191 Shibboleth Service Provider (SP) 3.x before 3.1.0 shipped a spec file that calls chown on files in a directory controlled by the service user (the shibd account) after installation. This allows the user to escalate to root by pointing symlinks to files such as /etc/shadow. | CVSS3: 7.8 | 0% Низкий | около 6 лет назад |
 | CVE-2019-19191 Shibboleth Service Provider (SP) 3.x before 3.1.0 shipped a spec file that calls chown on files in a directory controlled by the service user (the shibd account) after installation. This allows the user to escalate to root by pointing symlinks to files such as /etc/shadow. | CVSS3: 7.8 | 0% Низкий | около 6 лет назад |
| CVE-2019-19191 Shibboleth Service Provider (SP) 3.x before 3.1.0 shipped a spec file ... | CVSS3: 7.8 | 0% Низкий | около 6 лет назад |
 | openSUSE-SU-2020:0020-1 Security update for shibboleth-sp | 0% Низкий | около 6 лет назад | |
| SUSE-SU-2020:0115-1 Security update for shibboleth-sp | 0% Низкий | около 6 лет назад | |
| SUSE-SU-2019:3386-1 Security update for shibboleth-sp | 0% Низкий | около 6 лет назад | |
| GHSA-gcm7-32c7-5wrq Shibboleth Service Provider (SP) 3.x before 3.1.0 shipped a spec file that calls chown on files in a directory controlled by the service user (the shibd account) after installation. This allows the user to escalate to root by pointing symlinks to files such as /etc/shadow. | CVSS3: 7.8 | 0% Низкий | больше 3 лет назад |
Уязвимостей на страницу