Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Improper File Access in Infinera G42
Vulnerability Description
Unrestricted access to OS file system in SFTP service in Infinera G42 version R6.1.3 allows remote authenticated users to read/write OS files via SFTP connections. Details: Account members of the Network Administrator profile can access the target machine via SFTP with the same credentials used for SSH CLI access and are able to read all files according to the OS permission instead of remaining inside the chrooted directory position.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
不充分权限或特权的处理不恰当
Vulnerability Title
Infinera G42 安全漏洞
Vulnerability Description
SSH是芬兰等都是芬兰(SSH)公司的产品。SSH是一个应用协议。Rovin Bhandari FTP等都是(Rovin Bhandari)个人开发者的产品。FTP是一个简单 FTP 客户端和服务器的实现。elixir-ecto ecto等都是(elixir-ecto)开源的产品。ecto是一个用于数据映射和语言集成查询的工具包。 Infinera G42 R6.1.3版本存在安全漏洞，该漏洞源于访问控制不当，可能导致文件读写。
CVSS Information
N/A
Vulnerability Type
N/A