Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The inputtrap utility in QNX RTOS 6.1.0, 6.3, and possibly earlier versions does not properly check permissions when the -t flag is specified, which allows local users to read arbitrary files.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
QNX RTOS InputTrap本地任意文件泄露漏洞
Vulnerability Description
QNX RTOS是嵌入式设备的微内核操作系统,inputtrap是QNX中用于检测和启动输入管理器的工具。 inputtrap中的'-t'标签用于指定将要读取的trap文件。由于错误的权限检查,除了拥有'start'标签的文件外用户还可以管理访问磁盘中的任意文件。
CVSS Information
N/A
Vulnerability Type
N/A