PT-2021-24116
CVE-2021-44512
·
تاريخ النشر
2021-12-07
·
تاريخ التحديث
2022-05-03
الوصف من
CVSS 3.1
7.0
عاليةالمقاييسAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
tmate-ssh-server version 2.3.0
Description:
The issue is related to world-writable permissions on the /tmp/tmate/sessions directory, allowing a local attacker to compromise session handling integrity or obtain a read-write session ID from a read-only session symlink in this directory.
Recommendations:
For tmate-ssh-server version 2.3.0, consider changing the permissions of the /tmp/tmate/sessions directory to prevent world-writable access as a temporary workaround until a patch is available. Restrict access to this directory to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾