PT-2016-5133
CVE-2016-2363
·
تاريخ النشر
2016-06-20
·
تاريخ التحديث
2016-06-21
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Fonality (previously trixbox Pro) versions 12.6 through 14.1i
Description
The issue allows local users to obtain root access for command execution by leveraging access to the nobody account, due to weak permissions for the /var/www/rpc/surun script.
Recommendations
For versions 12.6 through 14.1i, update to a version released after 2016-06-01 to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾