PT-2020-21481

تاريخ النشر

2020-09-03

·

تاريخ التحديث

2020-09-03

الوصف من

CVSS 3.1
9.8
حرجة
المقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions arsenic-tabasco-cyborg-peanut-butter (affected versions not specified)
Description The issue concerns malicious code within the software that downloads and runs a script, resulting in a reverse shell being opened in the system. This indicates a severe compromise of the system's security. Any computer with this package installed or running should be considered fully compromised, necessitating the rotation of all secrets and keys stored on it from a different, presumably secure, computer.
Recommendations Remove the arsenic-tabasco-cyborg-peanut-butter package. Consider the computer fully compromised and take appropriate measures to secure any sensitive information. Rotate all secrets and keys stored on the compromised computer from a different computer. Note that removing the package may not guarantee the removal of all malicious software resulting from its installation.
قابلية الاستغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
GHSA-R742-7J4H-HJR8
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾