Количество 2
Количество 2
CVE-2024-3250
It was discovered that Canonical's Pebble service manager read-file API and the associated pebble pull command, before v1.10.2, allowed unprivileged local users to read files with root-equivalent permissions when Pebble was running as root. Fixes are also available as backports to v1.1.1, v1.4.2, and v1.7.4.
GHSA-4685-2x5r-65pj
Pebble service manager's file pull API allows access by any user
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2024-3250 It was discovered that Canonical's Pebble service manager read-file API and the associated pebble pull command, before v1.10.2, allowed unprivileged local users to read files with root-equivalent permissions when Pebble was running as root. Fixes are also available as backports to v1.1.1, v1.4.2, and v1.7.4. | CVSS3: 6.5 | 0% Низкий | почти 2 года назад | |
GHSA-4685-2x5r-65pj Pebble service manager's file pull API allows access by any user | CVSS3: 6.5 | 0% Низкий | почти 2 года назад |
Уязвимостей на страницу