Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Riverbed RiOS before 9.0.1 does not properly restrict shell access in single-user mode, which makes it easier for physically proximate attackers to obtain root privileges and access decrypted data by replacing the /opt/tms/bin/cli file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Riverbed RiOS 权限许可和访问控制问题漏洞
Vulnerability Description
Riverbed RiOS是美国Riverbed Technology公司的一套用于优化系统的软件平台。该平台提供应用加速、IT基础架构整合等功能。 Riverbed RiOS 9.0.1之前的版本中存在权限许可和访问控制问题漏洞，该漏洞源于程序没有正确的限制单用户模式中的shell访问权限。物理位置临近的攻击者可通过替换/opt/tms/bin/cli文件利用该漏洞获取root权限，访问解密的数据。
CVSS Information
N/A
Vulnerability Type
N/A