Lucene search

K
githubGitHub Advisory DatabaseGHSA-P788-RJ37-357W
HistorySep 01, 2020 - 3:26 p.m.

Insecure Defaults Leads to Potential MITM in ezseed-transmission

2020-09-0115:26:35
CWE-295
CWE-300
GitHub Advisory Database
github.com
25

Affected versions of ezseed-transmission download and run a script over an HTTP connection.

An attacker in a privileged network position could launch a Man-in-the-Middle attack and intercept the script, replacing it with malicious code, completely compromising the system running ezseed-transmission.

Recommendation

Update to version 0.0.15 or later.

CPENameOperatorVersion
ezseed-transmissionle0.0.14
Related for GHSA-P788-RJ37-357W