Lucene search
Alpine Linux Development TeamALPINE:CVE-2023-26560HistoryApr 26, 2023 - 12:15 a.m.
CVE-2023-26560
2023-04-2600:15:00
Alpine Linux Development Team
security.alpinelinux.org
4
cfengine enterprise
authenticated users
scheduled reports
arbitrary files
credentials
security vulnerability
0.001 Low
EPSS
Percentile
35.2%
Northern.tech CFEngine Enterprise before 3.21.1 allows a subset of authenticated users to leverage the Scheduled Reports feature to read arbitrary files and potentially discover credentials.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | 3.18-community | noarch | cfengine | = 3.20.0-r1 | UNKNOWN |
Related
prion
prion
Design/Logic Flaw
2023-04-26 00:15:00
cve
cve
CVE-2023-26560
2023-04-26 00:15:09
osv
osv
CVE-2023-26560
2023-04-26 00:15:09
nvd
nvd
CVE-2023-26560
2023-04-26 00:15:09
cvelist
cvelist
CVE-2023-26560
2023-04-25 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2436
2024-06-27 10:45:57