Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The admin pages for power types and key types in Beaker before 20.1 do not have any access controls, which allows remote authenticated users to modify power types and key types via navigating to $BEAKER/powertypes and $BEAKER/keytypes respectively.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Beaker 安全漏洞
Vulnerability Description
Beaker是一套开源的可对实验室的测试计算机提供管理和自动化功能的软件。 Beaker 20.1之前版本中的power和key类型管理页面存在安全绕过漏洞，该漏洞源于程序没有对power和key类型管理页面进行访问控制。远程攻击者可利用该漏洞修改power和key的类型
CVSS Information
N/A
Vulnerability Type
N/A