PT-2018-2320 · Rusbitech · Astra Linux

Publicado 2018-12-29 · Atualizado 2018-12-29

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:L/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Astra Linux (affected versions not specified)

Description The issue is related to an error in activating the "kiosk" mode in the fly-admin-local package when the /etc/xdg/rusbitech file and the astra-console group are missing. This could allow an attacker to impact the defined security policy rules.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-254

Identificadores relacionados

BDU:2019-00486

Produtos afetados

Astra Linux

Referências · 1

• https://bdu.fstec.ru/vul/2019-00486 · Nota de Segurança