BDU:2021-01903
Scores
EPSS Score
0.0000
CVSS
3.x 9.8
Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
All CVSS Scores
Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Уязвимость системы управления конфигурациями и удалённого выполнения операций Salt связана с отсутствием мер по нейтрализации специальных элементов. Эксплуатация уязвимости позволяет нарушителю, действующему удаленно, получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
Sources
Related Vulnerabilities
Reference Links
Vulnerable Software
Type: Configuration
Vendor: red hat inc.
Product: red hat ceph storage
Operating System: debian gnu/linux 9
{
"version_exact": "2"
}Source: bdu
Type: Configuration
Vendor: red hat inc.
Product: red hat ceph storage
Operating System: opensuse leap 15.1
{
"version_exact": "2"
}Source: bdu
Type: Configuration
Vendor: red hat inc.
Product: red hat ceph storage
Operating System: debian gnu/linux 10
{
"version_exact": "2"
}Source: bdu
Type: Configuration
Vendor: red hat inc.
Product: red hat ceph storage
Operating System: fedora 31
{
"version_exact": "2"
}Source: bdu
Type: Configuration
Vendor: red hat inc.
Product: red hat ceph storage
Operating System: altlinux 8
{
"version_exact": "2"
}Source: bdu
Type: Configuration
Vendor: red hat inc.
Product: red hat ceph storage
Operating System: осон основа оnyx *
{
"version_exact": "2"
}Source: bdu
Type: Configuration
Vendor: saltstack, inc
Product: salt
Operating System: debian gnu/linux 9
{
"version_end_excluding": "3002"
}Source: bdu
Type: Configuration
Vendor: saltstack, inc
Product: salt
Operating System: opensuse leap 15.1
{
"version_end_excluding": "3002"
}Source: bdu
Type: Configuration
Vendor: saltstack, inc
Product: salt
Operating System: debian gnu/linux 10
{
"version_end_excluding": "3002"
}Source: bdu
Type: Configuration
Vendor: saltstack, inc
Product: salt
Operating System: fedora 31
{
"version_end_excluding": "3002"
}Source: bdu
Type: Configuration
Vendor: saltstack, inc
Product: salt
Operating System: altlinux 8
{
"version_end_excluding": "3002"
}Source: bdu
Type: Configuration
Vendor: saltstack, inc
Product: salt
Operating System: осон основа оnyx *
{
"version_end_excluding": "3002"
}Source: bdu