CVE-2026-65199: CVE-2026-65199: güvenlik açığı

Açıklama (NVD)

openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers. An authenticated, but low-privilege, SNMP user can therefore invoke mapped backend operations as an administrative identity. In `route_mapper/account.lua`, `get_user_privilege` returns the complete nine-privilege set for a `special_users` group that includes the `SNMPv1_v2c` pseudo-user.

Özet bilgiler

CVSS v3.1

5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

EPSS

%0,15 (yüzdelik 4)

CWE

CWE-266

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• www.runzero.com
• CWE-266