PT-2019-10239 · None+1 · Sshguard+1

Joshua Signover · Publicado 2019-03-01 · Atualizado 2020-08-24 · CVE-2018-20798

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: pfSense version 2.4.4 1

Description: The issue arises from the expiretable configuration in pfSense, which sets block durations that are incompatible with those implemented by sshguard. This incompatibility might facilitate attackers' attempts to bypass intended access restrictions.

Recommendations: For pfSense version 2.4.4 1, consider adjusting the expiretable configuration to ensure compatibility with sshguard's block durations, thereby reinforcing access restrictions.

Exploit

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2018-20798

Produtos afetados

Pfsense

Sshguard

Referências · 3

• 🔥 https://redmine.pfsense.org/issues/9223 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-20798 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-20798 · Aviso do Fabricante