PT-2012-4793
CVE-2012-3537
·
تاريخ النشر
2012-09-05
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
4.6
متوسطةالمقاييسAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Crowbar versions 1.4 and earlier
Description
The issue is related to insecure handling of temporary files and predictable file names in the Crowbar Ohai plugin, allowing local users to execute arbitrary shell commands.
Recommendations
For Crowbar versions 1.4 and earlier, consider restricting access to the Crowbar Ohai plugin to minimize the risk of exploitation until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾