PT-2017-19143
CVE-2017-9731
·
تاريخ النشر
2017-06-16
·
تاريخ التحديث
2017-07-05
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Poky in poky-pyro versions 17.0.0 through YP Core - Pyro 2.3
Description
The issue allows attackers to obtain sensitive information by reading a URL in a Source entry in an ipk package. This is related to the meta/classes/package ipk.bbclass in Poky for the Yocto Project.
Recommendations
For versions 17.0.0 through YP Core - Pyro 2.3, update to a version that includes the fix for this issue to prevent sensitive information disclosure.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾