Beveiligingsadvies

CVE-2026-67439

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-29 20:58:24

Laatst bijgewerkt 2026-07-30 14:40:26

Toegewezen door GitHub_M

CVSS-score 4.3

Status PUBLISHED

Beschrijving

OliveTin gives safe and simple access to predefined shell commands from a web interface. Prior to 3000.17.0, the service/internal/api/api.go StartActionAndWait and StartActionByGetAndWait endpoints return full LogEntry output after execution without enforcing the logs permission, allowing a user with exec permission but logs:false to read action output. This issue is fixed in version 3000.17.0.

← Alle CVE's bekijken Bekijk op cve.org ↗