PT-2020-12496
CVE-2020-11016
·
تاريخ النشر
2020-04-30
·
تاريخ التحديث
2020-05-06
الوصف من
CVSS 3.1
9.1
حرجةالمقاييسAV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L
Name of the Vulnerable Software and Affected Versions
IntelMQ Manager versions 1.1.0 through 2.1.0
Description
The issue arises from the backend's incorrect handling of user-input messages in the "send" functionality of the Inspect-tool of the Monitor component. This could allow an attacker with access to the IntelMQ Manager to execute arbitrary code with the privileges of the webserver.
Recommendations
For IntelMQ Manager versions 1.1.0 through 2.1.0, update to version 2.1.1 to fix the vulnerability.
As a temporary workaround, consider restricting access to the Inspect-tool of the Monitor component until the update is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾