CVE-2008-4313 — Redhat Enterprise Linux vulnerability

CWE-2644 documents4 sources
Severity
6.0MEDIUMNVD
EPSS
0.6%
top 31.84%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Redhat Enterprise LinuxRedhat Enterprise Linux Desktop
Timeline
PublishedNov 27
Latest updateMay 2

Description

A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 6.8 | Impact: 6.4

Affected Packages1 packages

Also affects: Enterprise Linux 5.0

Patches

Patch: admin.fedoraproject.org ↗Patch: admin.fedoraproject.org ↗

🔴Vulnerability Details

1
GHSA
GHSA-98w9-9xc5-rh5r: A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2↗2022-05-02
▶

📋Vendor Advisories

1
Red Hat
tog-pegasus: WBEM services access not restricted to dedicated user after 2.7.0 rebase↗2008-08-14
▶

💬Community

1
Bugzilla
CVE-2008-4313 tog-pegasus: WBEM services access not restricted to dedicated user after 2.7.0 rebase↗2008-08-15
▶