VDB
BDU%3A2024-01534
BDU%3A2024-01534
PUBLISHED
CVSS 10 CRITICAL
Уязвимость функции setKey() библиотеки для разбора аргументов командной строки minimist, позволяющая нарушителю реализовать атаку типа "загрязнение прототипа"
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Novell Inc., Red Hat Inc., Сообщество свободного программного обеспечения, ООО «Ред Софт», АО "НППКТ" | SUSE Linux Enterprise Server for SAP Applications, Suse Linux Enterprise Server, SUSE Linux Enterprise High Performance Computing, SUSE Linux Enterprise Module for Web Scripting, Red Hat Enterprise Linux, Red Hat JBoss Fuse, Debian GNU/Linux, SUSE Enterprise Storage, Red Hat Single Sign-On, Red Hat Quay, Red Hat Process Automation, SUSE CaaS Platform, Red Hat 3scale API Management Platform, OpenSUSE Leap, Red Hat JBoss Enterprise Application Platform Expansion Pack, РЕД ОС (запись в едином реестре российских программ №3751), SUSE Manager Proxy, SUSE Manager Server, SUSE Manager Retail Branch Server, Red Hat OpenShift GitOps, Red Hat OpenShift Container Platform, Red Hat Satellite, ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913), Red Hat JBoss Enterprise Application Platform, Migration Toolkit for Containers, Openshift Service Mesh, Red Hat Fuse, SUSE Manager Server Module, Red Hat Process Automation Manager, SUSE Liberty Linux, Red Hat Software Collections for Red Hat Enterprise Linux, minimist |
Timeline
- Feb 25, 2024 CVE Published
- Aug 15, 2024 CVE Updated
References
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2021-44906 url
- https://security-tracker.debian.org/tracker/CVE-2021-44906 url
- https://ubuntu.com/security/CVE-2021-44906 url
- https://www.suse.com/security/cve/CVE-2021-44906.html url
- https://access.redhat.com/security/cve/CVE-2022-4245 url
- https://snyk.io/vuln/SNYK-JS-MINIMIST-559764 url
- https://github.com/substack/minimist/issues/164 url
- https://github.com/Marynk/JavaScript-vulnerability-detection/blob/main/minimist%20PoC.zip url
- https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/2.6/ url
- http://repo.red-soft.ru/redos/7.3c/x86_64/updates/ url
- https://access.redhat.com/security/cve/CVE-2021-44906 advisory
- https://redos.red-soft.ru/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-http-servera-apache-cve-2021-44790-cve-2021-44224/ advisory