PT-2001-2034 · Red Hat · Red Hat Stronghold

Published 2001-11-28 · Updated 2017-12-19 · CVE-2001-0868

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Red Hat Stronghold versions 2.3 through 3.0

Description The issue allows remote attackers to retrieve system information via an HTTP GET request to endpoints such as "stronghold-info" or "stronghold-status".

Recommendations For versions 2.3 through 3.0, consider restricting access to the "stronghold-info" and "stronghold-status" endpoints to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2001-0868

Affected Products

Red Hat Stronghold

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2001-0868 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51950 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7582 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0868 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51951 · Note
• http://marc.info/?l=bugtraq&m=100654958131854&w=2 · Note
• http://securityfocus.com/bid/3577 · Note