Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
MagniComp SysInfo before 10-H81, as shipped with BMC BladeLogic Automation and other products, contains an information exposure vulnerability in which a local unprivileged user is able to read any root (uid 0) owned file on the system, regardless of the file permissions. Confidential information such as password hashes (/etc/shadow) or other secrets (such as log files or private keys) can be leaked to the attacker. The vulnerability has a confidentiality impact, but has no direct impact on system integrity or availability.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MagniComp SysInfo 信息泄露漏洞
Vulnerability Description
MagniComp SysInfo是美国MagniComp公司的一款支持多种平台的系统代理和查看器。该产品通过XML和HTML等形式提供详细的系统、软件和硬件清单，以及操作系统配置和存储资产管理配置信息等。 MagniComp SysInfo 10-H81之前版本（捆绑在BMC BladeLogic Automation和其他产品上）存在信息泄露漏洞。本地攻击者可利用该漏洞读取root账户（uid 0）拥有的任意文件或泄露敏感信息（密码散列、日志文件或密钥）。
CVSS Information
N/A
Vulnerability Type
N/A