PT-2019-14823 · Ezmaster · Ezmaster

Touv · Publicado 2019-11-29 · Atualizado 2020-10-16 · CVE-2019-16767

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ezmaster versions prior to 5.2.11

Description The issue concerns the admin sys mode, which is now conditional and dedicated to a special case. By default, since version 5.2.11, no instance or container is launched with advanced capabilities, meaning they are not launched as root.

Recommendations For versions prior to 5.2.11, update to version 5.2.11 or later to ensure instances are not launched with advanced capabilities by default.

Correção

Enumeração de Fraquezas

CWE-250

Identificadores relacionados

CVE-2019-16767

GHSA-G654-5QJF-G6CX

Produtos afetados

Ezmaster

Referências · 5

• https://github.com/Inist-CNRS/ezmaster/pull/51 · Correção
• https://github.com/Inist-CNRS/ezmaster/blob/master/CHANGELOG.md#ezmaster-5211 · Nota
• https://github.com/Inist-CNRS/ezmaster/security/advisories/GHSA-g654-5qjf-g6cx · Nota
• https://osv.dev/vulnerability/CVE-2019-16767 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-16767 · Nota de Segurança