PT-2022-17744

CVE-2022-26252

·

Published

2022-03-27

·

Updated

2022-04-04

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions aaPanel version 6.8.21
Description The issue allows attackers to perform directory traversal, enabling them to obtain the root user's private SSH key, specifically id rsa.
Recommendations For aaPanel version 6.8.21, update to a newer version that contains a fix for this issue to prevent directory traversal attacks.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')
Related identifiers
CVE-2022-26252
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com