PT-2020-16936
CVE-2020-28169
·
تاريخ النشر
2020-12-24
·
تاريخ التحديث
2025-03-24
الوصف من
CVSS 3.1
7.0
عاليةالمقاييسAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
td-agent-builder plugin for Fluentd versions prior to 2020-12-18
Description
The issue allows attackers to gain privileges because the bin directory is writable by a user account, but a file in bin is executed as NT AUTHORITYSYSTEM.
Recommendations
For versions prior to 2020-12-18, update the td-agent-builder plugin to a version released after 2020-12-18 to resolve the issue. As a temporary workaround, consider restricting write access to the bin directory to prevent exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾