PT-2020-8190
CVE-2017-18641
·
تاريخ النشر
2016-08-22
·
تاريخ التحديث
2020-02-12
الوصف من
CVSS 2.0
9.3
عاليةالمقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions:
LXC version 2.0
Description:
The issue concerns the template scripts in LXC that download code over cleartext HTTP without performing a digital-signature check before executing it to bootstrap containers.
Recommendations:
For LXC version 2.0, consider modifying the template scripts to use secure HTTP connections and implement digital-signature checks for downloaded code to prevent potential exploitation. As a temporary workaround, restrict the use of these template scripts until a secure version is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾