Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Foundation webapp admin interface in GroundWork Monitor Enterprise 6.7.0 uses the nagios account as the owner of writable files under /usr/local/groundwork, which allows context-dependent attackers to bypass intended filesystem restrictions by leveraging access to a GroundWork script.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GroundWork Monitor Enterprise Foundation webapp admin接口权限许可和访问控制漏洞
Vulnerability Description
GroundWork Monitor Enterprise是美国GroundWork公司的一款开放的、功能全面的监控平台。 GroundWork Monitor Enterprise 6.7.0版本中的Foundation webapp admin接口中存在漏洞，该漏洞源于程序在/usr/local/groundwork目录下使nagios账户作为可写文件的所有者。上下文相关的攻击者可通过对GroundWork的脚本访问权限利用该漏洞绕过既定的文件系统限制。
CVSS Information
N/A
Vulnerability Type
N/A