CVE-2024-8769

A vulnerability in the LockManager.releaselocks function in aimhubio/aim commit bb76afe allows for arbitrary file deletion through relative path traversal. The runhash parameter, which is user-controllable, is concatenated without normalization as part of a path used to specify file deletion. Thi...

Directory Traversal

Overview aim is a super-easy way to record, search and compare AI experiments. Affected versions of this package are vulnerable to Directory Traversal in the LockManager.releaselocks function. An attacker can delete arbitrary files on the filesystem by passing an absolute path to the target file ...

GHSA-4QCX-JX49-6QRH Aim path traversal in LockManager.release_locks

A vulnerability in the LockManager.releaselocks function in aimhubio/aim commit bb76afe allows for arbitrary file deletion through relative path traversal. The runhash parameter, which is user-controllable, is concatenated without normalization as part of a path used to specify file deletion. Thi...

Aim path traversal in LockManager.release_locks

A vulnerability in the LockManager.releaselocks function in aimhubio/aim commit bb76afe allows for arbitrary file deletion through relative path traversal. The runhash parameter, which is user-controllable, is concatenated without normalization as part of a path used to specify file deletion. Thi...

CVE-2024-8769 Arbitrary File Deletion via Relative Path Traversal in aimhubio/aim

A vulnerability in the LockManager.releaselocks function in aimhubio/aim commit bb76afe allows for arbitrary file deletion through relative path traversal. The runhash parameter, which is user-controllable, is concatenated without normalization as part of a path used to specify file deletion. Thi...

CVE-2024-8769

CVE-2024-8769 affects aimhubio/aim where the LockManager.release_locks function concatenates a user-controlled run_hash into a path, enabling relative path traversal that can delete arbitrary files. The flaw is exposed through Repo._close_run() via the tracking server instruction API, potentially...

Aim 安全漏洞

Aim is an easy-to-use and high-performance open source experiment tracker from Aim Open Source USA. A security vulnerability exists in the bb76afe version of Aim, which stems from the LockManager.releaselocks function not normalizing user-controllable parameters, which could lead to arbitrary fil...

keyPrice is global and change on keyPrice can damage lockManager or keyOwner

Handle 0x0x0x Vulnerability details Impact A lock manager changes keyPrice. If the price is increased, then possible refunds are also increased and it can result in theft of funds. If the price is reduced, by doing so lock manager can reduce the refund payments and scam the users. Tools Used Manu...

HP-UX Security patch : PHSS_17580

The remote host is missing HP-UX Security Patch number PHSS17580 . Security Vulnerability in MC/ServiceGuard & MC/LockManager %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17445;...

HP-UX Security patch : PHSS_17478

The remote host is missing HP-UX Security Patch number PHSS17478 . Security Vulnerability in MC/ServiceGuard & MC/LockManager %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16665;...

HP-UX PHSS_17484 : s700_800 11.00 MC/LockManager A.11.05 (Japanese) Patch

s700800 11.00 MC/LockManager A.11.05 Japanese Patch : MC/ServiceGuard and MC/LockManager exhibit improper implementation of restricted SAM functionality. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS1748...

CVE-1999-0435

CVE-1999-0435 affects HP-UX MC/ServiceGuard and MC/LockManager. The root cause is an improper implementation of restricted SAM functionality, enabling local users to gain elevated privileges. What’s affected: HP-UX MC/ServiceGuard and MC/LockManager components, with listed patches PHSS_17581 (and...

hp-ux.mc-serviceguard+mc-lockmanager.txt

Date: Wed, 31 Mar 1999 04:35:03 -0800 PST Subject: Security Bulletins Digest From: [email protected] HP Electronic Support Center To: [email protected] Reply-To: [email protected] Errors-To:...

CVE-1999-0435

MC/ServiceGuard and MC/LockManager in HP-UX allows local users to gain privileges through SAM...

PT-1999-1118 · Hewlett Packard · Hp-Ux

Name of the Vulnerable Software and Affected Versions: HP-UX affected versions not specified Description: A local privilege escalation issue exists in HP-UX, specifically affecting MC/ServiceGuard and MC/LockManager, where local users can exploit the Security Administration Manager SAM to gain...