← back
CVE-2017-9270

post-auth arbitrary file write on cryptctl server

CVSS 8.7 HIGHEPSS 2.0%CWE-22
In cryptctl before version 2.0 a malicious server could send RPC requests that could overwrite files outside of the cryptctl key database.
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
Affected products
SUSE · cryptctl

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://bugzilla.suse.com/show_bug.cgi?id=1041963https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00022.htmlhttps://www.suse.com/de-de/security/cve/CVE-2017-9270/