PT-2017-17795 · Rhmap · Millicore

Publicado 2017-09-28 · Atualizado 2019-10-03 · CVE-2017-7552

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions millicore versions prior to 3.19.0 millicore versions 4.x prior to 4.5.0

Description A flaw in the file editor allows files to be executed as well as created, potentially compromising other users' or teams' projects stored in the source control management of the RHMAP Core installation.

Recommendations For versions prior to 3.19.0, update to version 3.19.0 or later. For versions 4.x prior to 4.5.0, update to version 4.5.0 or later.

Correção

Identificadores relacionados

CVE-2017-7552

RHSA-2017:2674

Produtos afetados

Millicore

Referências · 5

• https://access.redhat.com/errata/RHSA-2017:2675 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-7552 · Nota de Segurança
• https://bugzilla.redhat.com/show_bug.cgi?id=1477797 · Nota
• https://access.redhat.com/errata/RHSA-2017:2674 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-7552 · Aviso do Fabricante