Beveiligingsadvies

CVE-2026-28790

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-05 19:34:53

Laatst bijgewerkt 2026-03-06 17:57:04

Toegewezen door GitHub_M

CVSS-score 7.5

Status PUBLISHED

Beschrijving

OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.0, OliveTin allows an unauthenticated guest to terminate running actions through KillAction even when authRequireGuestsToLogin: true is enabled. Guests are correctly blocked from dashboard access, but can still call the KillAction RPC directly and successfully stop a running action. This is a broken access control issue that causes unauthorized denial of service against legitimate action executions. This issue has been patched in version 3000.11.0.

← Alle CVE's bekijken Bekijk op cve.org ↗