PT-2017-17653 · Riverbed · Riverbed Rios

Publicado 2017-04-04 · Atualizado 2019-10-03 · CVE-2017-7307

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Riverbed RiOS versions prior to 9.0.1

Description The issue makes it easier for physically proximate attackers to obtain root privileges and access decrypted data by replacing the /opt/tms/bin/cli file, due to improper restriction of shell access in single-user mode.

Recommendations For versions prior to 9.0.1, update to version 9.0.1 or later to resolve the issue.

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2017-7307

Produtos afetados

Riverbed Rios

Referências · 4

• https://supportkb.riverbed.com/support/index?page=content&id=S30065 · Aviso do Fabricante
• http://seclists.org/fulldisclosure/2017/Feb/25 · Nota
• https://osv.dev/vulnerability/CVE-2017-7307 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-7307 · Nota de Segurança