Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2021-33178 →

DEBIAN-CVE-2021-33178

The Manage Backgrounds functionality within NagVis versions prior to 1.9.29 is vulnerable to an authenticated path traversal vulnerability. Exploitati...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

The Manage Backgrounds functionality within NagVis versions prior to 1.9.29 is vulnerable to an authenticated path traversal vulnerability. Exploitation of this results in a malicious actor having the ability to arbitrarily delete files on the local system.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 nagvis

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.9.29-1"}]}]

Debian:13 nagvis

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.9.29-1"}]}]

Debian:14 nagvis

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.9.29-1"}]}]

Références

advisory security-tracker.debian.org