PT-2018-2320 · Rusbitech · Astra Linux

Published 2018-12-29 · Updated 2018-12-29

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:L/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Astra Linux (affected versions not specified)

Description The issue is related to an error in activating the "kiosk" mode in the fly-admin-local package when the /etc/xdg/rusbitech file and the astra-console group are missing. This could allow an attacker to impact the defined security policy rules.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-254

Related Identifiers

BDU:2019-00486

Affected Products

Astra Linux

References · 1

• https://bdu.fstec.ru/vul/2019-00486 · Security Note