Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Piranha Configuration Tool in Piranha 0.8.6 does not properly restrict access to webpages, which allows remote attackers to bypass authentication and read or modify the LVS configuration via an HTTP POST request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Red Hat Piranha 安全漏洞
Vulnerability Description
Piranha是美国红帽（Red Hat）公司的一套基于Web的LVS（Linux虚拟服务器）软件。该软件提供集群、双机热备、负载均衡等功能。 Red Hat Piranha 0.8.6版本中的Piranha Configuration Tool中存在安全漏洞，该漏洞源于程序没有正确限制访问网页。远程攻击者可通过发送HTTP POST请求利用该漏洞绕过身份验证，读取或修改LVS配置。
CVSS Information
N/A
Vulnerability Type
N/A