PT-2023-15654 · Unknown · Eternal Terminal

Matthias Gerstner · CVE-2022-48258 · Publicado 2023-01-13 · Atualizado 2025-11-04

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Eternal Terminal version 6.2.1

Description The issue concerns world-readable logfiles in etserver and etclient.

Recommendations For Eternal Terminal version 6.2.1, restrict access to the logfiles of etserver and etclient to prevent unauthorized reading.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2022-48258

OPENSUSE-SU-2023:0041-1

OPENSUSE-SU-2024:12630-1

Produtos afetados

Eternal Terminal

Referências · 21

• 🔥 https://github.com/MisterTea/EternalTerminal/pull/556 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48258.json · Exploit
• https://github.com/MisterTea/EternalTerminal/issues/555 · Correção
• https://osv.dev/vulnerability/CVE-2022-48258 · Aviso do Fabricante
• https://t.me/cvenotify/78796 · Publicação no Telegram
• https://bugzilla.suse.com/1207123 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2022-48258 · Nota de Segurança
• https://t.me/cibsecurity/56473 · Publicação no Telegram
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2RY6PKBU73I45L6YWNYCUK2XBEXEFX7L · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2024:12630-1 · Aviso do Fabricante
• https://t.me/cveNotify/141673 · Publicação no Telegram
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U6MO4FSKYNSAJVUXYP7LRY7ARUIGKBFL · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/2RY6PKBU73I45L6YWNYCUK2XBEXEFX7L · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2022-48258 · Nota
• https://lists.opensuse.org/archives/list/[e-mail]/thread/T2VTENKRMSWIB6OVIPA263AB3ABXCRJT · Nota