Lucene search
PRIOn knowledge basePRION:CVE-2023-35887HistoryJul 10, 2023 - 4:15 p.m.
Design/Logic Flaw
2023-07-1016:15:00
PRIOn knowledge base
www.prio-n.com
12
logic flaw
apache mina
sensitive information
unauthorized actor
vulnerability
sftp
rootedfilesystem
symlinks
upgrade
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA.
In SFTP servers implemented using Apache MINA SSHD that use a RootedFileSystem, logged users may be able to discover “exists/does not exist” information about items outside the rooted tree via paths including parent navigation (“…”) beyond the root, or involving symlinks.
This issue affects Apache MINA: from 1.0 before 2.10. Users are recommended to upgrade to 2.10
Related
osv
osv
Apache MINA SSHD information disclosure vulnerability
2023-07-10 18:30:49
CVE-2023-35887
2023-07-10 16:15:53
nessus
nessus
RHEL 8 : apache-mina-sshd (Unpatched Vulnerability)
2024-05-11 00:00:00
ibm
ibm
cve
cve
CVE-2023-35887
2023-07-10 16:15:53
veracode
veracode
Information Disclosure
2023-07-13 08:56:24
cnvd
cnvd
Apache MINA Information Disclosure Vulnerability
2023-07-12 00:00:00
github
github
Apache MINA SSHD information disclosure vulnerability
2023-07-10 18:30:49
redhatcve
redhatcve
CVE-2023-35887
2023-09-21 13:24:39
cvelist
cvelist
nvd
nvd
CVE-2023-35887
2023-07-10 16:15:53
redhat
redhat
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00