PT-2014-5042 · Ibm · Ibm Scale Out Network Attached Storage

Publicado

2014-07-19

·

Atualizado

2014-08-04

·

CVE-2014-3045

CVSS v2.0

2.1

Baixa

VetorAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions IBM Scale Out Network Attached Storage (SONAS) versions 1.3.x through 1.4.x before 1.4.3.3
Description The issue allows local users to obtain sensitive information by leveraging root access, as an administrative password is placed in the shell history upon use of the -p option to the chuser command.
Recommendations For versions 1.3.x through 1.4.x before 1.4.3.3, update to version 1.4.3.3 or later to resolve the issue.

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2014-3045

Produtos afetados

Ibm Scale Out Network Attached Storage