PT-2022-16664
CVE-2022-24389
·
تاريخ النشر
2022-05-17
·
تاريخ التحديث
2022-05-26
الوصف من
CVSS 2.0
9.0
عاليةالمقاييسAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Fidelis Network and Deception versions prior to 9.4.5
Description
The issue allows an attacker with user-level access to the CLI to inject root-level commands into various Fidelis components, including CommandPost, Collector, Sensor, and Sandbox, as well as neighboring components. This is due to a vulnerability in the rconfig "cert utils".
Recommendations
For versions prior to 9.4.5, apply the available patches and updates to address this issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾