Unrated
In CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by looking at the process list when a data upload is being performed. This license...
CVE-2019-13033
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2019-13033 lynis Fixed in: 3.0.0-1
Original description The description as published by the source.
In CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by looking at the process list when a data upload is being performed. This license can be used to upload data to a central Lynis server. Although no data can be extracted by knowing the license key, it may be possible to upload the data of additional scans.
References
- advisory cisofy.com
- advisory lists.debian.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org