PT-2018-9620 · Red Hat · Koji

Mikem · Publicado 2018-04-04 · Atualizado 2019-10-03 · CVE-2018-1002150

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Crítica

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions: Koji versions 1.12 through 1.15

Description: The issue is related to incorrect access control, which results in arbitrary filesystem read/write access.

Recommendations: For versions 1.12, update to version 1.12.1. For version 1.13, update to version 1.13.1. For version 1.14, update to version 1.14.1. For version 1.15, update to version 1.15.1.

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2018-1002150

GHSA-6MWW-XVH7-FQ4F

PYSEC-2018-86

Produtos afetados

Koji

Referências · 14

• https://github.com/pypa/advisory-database/tree/main/vulns/koji/PYSEC-2018-86.yaml · Nota
• https://ubuntu.com/security/CVE-2018-1002150 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2018-1002150 · Nota de Segurança
• https://github.com/advisories/GHSA-6mww-xvh7-fq4f · Nota
• http://openwall.com/lists/oss-security/2018/04/04/1 · Nota
• https://docs.pagure.org/koji/CVE-2018-1002150 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-1002150 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-1002150 · Aviso do Fabricante
• https://pagure.io/koji/issue/850 · Nota
• https://pagure.io/koji/c/ab1ade7 · Nota
• https://osv.dev/vulnerability/GHSA-6mww-xvh7-fq4f · Aviso do Fabricante
• https://pagure.io/koji · Nota
• https://osv.dev/vulnerability/CVE-2018-1002150 · Aviso do Fabricante
• https://osv.dev/vulnerability/PYSEC-2018-86 · Aviso do Fabricante