VDB
BDU%3A2024-02253
BDU%3A2024-02253
PUBLISHED
CVSS 7.800000190734863 HIGH
Уявимость пакетного менеджера Apache Ivy, связанная с неверным ограничением имени пути к каталогу с ограниченным доступом, позволяющая нарушителю получить несанкционированный доступ к файловой системе
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Novell Inc., ООО «Ред Софт», Apache Software Foundation, JetBrains | Red Hat Enterprise Linux, Red Hat JBoss Fuse, Red Hat Software Collections, Red Hat Single Sign-On, Red Hat JBoss Data Grid, SUSE Linux Enterprise Module for Development Tools, Suse Linux Enterprise Server, Red Hat Integration Camel K, Red Hat Integration Camel Quarkus, Red Hat Data Grid, Red Hat JBoss Enterprise Application Platform Expansion Pack, РЕД ОС (запись в едином реестре российских программ №3751), SUSE Linux Enterprise High Performance Computing, SUSE Linux Enterprise Server for SAP Applications, SUSE Manager Proxy, SUSE Manager Server, Suse Linux Enterprise Desktop, SUSE Enterprise Storage, SUSE Manager Retail Branch Server, SUSE Linux Enterprise Real Time, SUSE Linux Enterprise Server Business Critical Linux, Migration Toolkit for Applications, Migration Toolkit for Runtimes, Red Hat JBoss Enterprise Application Platform, Red Hat Integration Camel for Spring Boot, Ivy, Scala Plugin for IntelliJ IDEA |
Timeline
- Mar 22, 2024 CVE Published
- Dec 5, 2024 CVE Updated
References
- https://www.suse.com/security/cve/CVE-2022-37866.html url
- https://access.redhat.com/security/cve/CVE-2022-37866 url
- https://github.com/JetBrains/intellij-scala url
- https://redos.red-soft.ru/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-apache-ivy-cve-2022-37866-cve-2022-37865/?sphrase_id=592508 url
- https://ant.apache.org/ivy/ advisory