Authentication flaw

2019-12-0516:15:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.3%

JSON

beegfs-ctl in ThinkParQ BeeGFS through 7.1.3 allows Authentication Bypass via communication with a BeeGFS metadata server (which is typically not exposed to external networks).

CPENameOperatorVersion
beegfsle7.1.3

CPE	Name	Operator	Version
	beegfs	le	7.1.3

References

packetstormsecurity.com/files/155573/BeeGFS-7.1.3-Privilege-Escalation.html

seclists.org/bugtraq/2019/Dec/7

www.hpcsec.com/2019/12/04/cve-2019-15897/