未評価
In CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by looking at the process list when a data upload is being performed. This license...
CVE-2019-13033
SecPulse初出
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2019-13033 lynis 修正版: 3.0.0-1
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
In CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by looking at the process list when a data upload is being performed. This license can be used to upload data to a central Lynis server. Although no data can be extracted by knowing the license key, it may be possible to upload the data of additional scans.
参照URL
- advisory cisofy.com
- advisory lists.debian.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org