#850 fix access check in host.distRepoMove
Closed: Fixed 9 months ago Opened 10 months ago by mikem.

The host.distRepoMove hub call does not perform the correct access checks. This bug allows an attacker to manipulate the filesystem, potentially destroying data or exposing secrets.

This issue has been assigned CVE-2018-1002150

You can read the full announcement here:

Metadata Update from @mikem:
- Issue private status set to: False (was: True)

9 months ago

Metadata Update from @tkopecek:
- Issue set to the milestone: 1.16

8 months ago

Login to comment on this ticket.