PT-2018-9302
CVE-2018-1000126
·
Publicado
2018-03-13
·
Atualizado
2018-04-11
Descrição por
CVSS 3.1
7.5
AltaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
Ajenti version 2
Description:
The issue allows for information disclosure, which can lead to user and system enumeration, as well as exposure of data from the
/etc/ajenti/config.yml file. This can be exploited through network connectivity to the web application.Recommendations:
For Ajenti version 2, update to a version that fixes the information disclosure vulnerability, specifically addressing the issue in Line 176 of the code source.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾