漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Bluechi: privilege escalation in bluechi via unrestricted cross-node systemd dependencies
Vulnerability Description
A vulnerability was found in BlueChi, a multi-node systemd service controller used in RHIVOS. This flaw allows a user with root privileges on a managed node (qm) to create or override systemd service unit files that affect the host node. This issue can lead to privilege escalation, unauthorized service execution, and potential system compromise.
CVSS Information
CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Vulnerability Type
授权机制不正确
Vulnerability Title
Eclipse BlueChi 安全漏洞
Vulnerability Description
Eclipse BlueChi是Eclipse开源的一款服务控制和状态管理软件。 Eclipse BlueChi存在安全漏洞,该漏洞源于拥有root权限的用户可在受管节点上创建或覆盖systemd服务单元文件,可能导致权限提升、未经授权的服务执行和系统破解。
CVSS Information
N/A
Vulnerability Type
N/A