PT-2018-5113 · Git+1 · Git+1

Intrigeri · Publicado 2018-04-10 · Atualizado 2024-06-15 · CVE-2016-9645

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions ikiwiki versions prior to 3.20161229 git versions prior to 2.8.0

Description The issue concerns an incomplete fix for ikiwiki, resulting in an editing restriction bypass for git revert. This occurs when using git versions older than 2.8.0.

Recommendations For ikiwiki versions prior to 3.20161229, update to version 3.20161229 or later. For git versions prior to 2.8.0, update to version 2.8.0 or later.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2016-9645

MGASA-2019-0113

OPENSUSE-SU-2024:10860-1

Produtos afetados

Git

Ikiwiki

Referências · 33

• https://suse.com/security/cve/CVE-2016-9646 · Nota
• https://suse.com/security/cve/CVE-2009-2944 · Nota
• https://suse.com/security/cve/CVE-2008-0169 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=24453 · Nota
• https://openwall.com/lists/oss-security/2016/05/06/9 · Nota
• https://suse.com/security/cve/CVE-2011-1401 · Nota
• https://marc.info/?l=oss-security&m=148304341511854&w=2 · Nota
• https://debian.org/security/2019/dsa-4399 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2011-0428 · Nota
• https://openwall.com/lists/oss-security/2019/02/28/1 · Nota
• https://openwall.com/lists/oss-security/2017/01/12/2 · Nota
• https://suse.com/security/cve/CVE-2012-0220 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-9645 · Nota de Segurança
• https://osv.dev/vulnerability/openSUSE-SU-2024:10860-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-9645 · Nota