PT-2001-2034 · Red Hat · Red Hat Stronghold

Publicado 2001-11-28 · Atualizado 2017-12-19 · CVE-2001-0868

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Red Hat Stronghold versions 2.3 through 3.0

Description The issue allows remote attackers to retrieve system information via an HTTP GET request to endpoints such as "stronghold-info" or "stronghold-status".

Recommendations For versions 2.3 through 3.0, consider restricting access to the "stronghold-info" and "stronghold-status" endpoints to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2001-0868

Produtos afetados

Red Hat Stronghold

Referências · 7

• https://exchange.xforce.ibmcloud.com/vulnerabilities/51950 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7582 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0868 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51951 · Nota
• http://marc.info/?l=bugtraq&m=100654958131854&w=2 · Nota
• http://securityfocus.com/bid/3577 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-0868 · Nota de Segurança