Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
World-writable permissions on the /tmp/tmate/sessions directory in tmate-ssh-server 2.3.0 allow a local attacker to compromise the integrity of session handling, or obtain the read-write session ID from a read-only session symlink in this directory.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
tmate-ssh-server 安全漏洞
Vulnerability Description
Tmate-Ssh-Server是一个 Tmate Ssh 服务器。 tmate-ssh-server 存在安全漏洞,该漏洞源于tmate-ssh-server 2.3.0中tmp tmate sessions目录的World-writable权限存在缺陷。攻击者可利用该漏洞破坏会话处理的完整性,或者从该目录中的只读会话符号链接获得读写会话ID。
CVSS Information
N/A
Vulnerability Type
N/A