PT-2026-85522 · Stackstorm+1 · St2
CVSS v2.0
6.5
متوسطة
| المتجه | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
StackStorm st2 versions prior to 3.9.1
Description
Improper privilege management exists in the API Key Handler component within the file
st2api/st2api/controllers/v1/auth.py. A remote attacker can manipulate the api key api.user argument to gain unauthorized privileges.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
استغلال
Incorrect Privilege Assignment
Improper Privilege Management
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
المعرّفات ذات الصلة
المنتجات المتأثرة
St2