Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Read access of deprivileged Radiflow iSAP Smart Collector user
Vulnerability Description
The Linux deprivileged user vpuser in Radiflow iSAP Smart Collector (CentOS 7 - VSAP 1.20) can read the entire file system content, including files belonging to other users and having restricted access (like, for example, the root password hash).
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Vulnerability Type
特权授予不正确
Vulnerability Title
Radiflow iSAP Smart Collector 安全漏洞
Vulnerability Description
Radiflow iSAP Smart Collector是美国Radiflow公司的一个为工业网络设计的远程流量采集与转发设备。 Radiflow iSAP Smart Collector存在安全漏洞，该漏洞源于vpuser用户可以读取整个文件系统内容，可能导致信息泄露。
CVSS Information
N/A
Vulnerability Type
N/A