CVE-2023-4640
Set Logging Level Without Authentication
概要
Set Logging Level Without Authentication
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
The controller responsible for setting the logging level does not include any authorization
checks to ensure the user is authenticated. This can be seen by noting that it extends
Controller rather than AuthenticatedController and includes no further checks. This issue affects YugabyteDB Anywhere: from 2.0.0 through 2.17.3
参照URL
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web yugabyte.com