PT-2017-8720 · Firewalld+3 · Firewall+3
Huzaifa S. Sidhpurwala
·
Publicado
2016-11-03
·
Atualizado
2024-06-15
·
CVE-2016-5410
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
firewalld versions prior to 0.4.3.3
Description
The issue allows local users to bypass authentication and modify firewall configurations. This can be achieved via specific D-Bus API methods, including
addPassthrough, removePassthrough, addEntry, removeEntry, or setEntries.Recommendations
For versions prior to 0.4.3.3, update to version 0.4.3.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the D-Bus API methods
addPassthrough, removePassthrough, addEntry, removeEntry, and setEntries to minimize the risk of exploitation.Correção
Improper Authentication
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Red Hat
Firewall