PT-2018-17987
CVE-2018-7268
·
Published
2018-05-21
·
Updated
2018-10-09
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
MagniComp SysInfo versions prior to 10-H81
Description
The issue allows a local unprivileged user to read any root-owned file on the system, regardless of the file permissions. This can lead to the exposure of confidential information, such as password hashes, log files, or private keys. The impact is related to confidentiality, with no direct effect on system integrity or availability.
Recommendations
For MagniComp SysInfo versions prior to 10-H81, update to version 10-H81 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾