CVE:CVE-2019-3816
CNNVD:CNNVD-201903-477
Openwsman是一套开源的WEB服务管理规范实现。
Openwsman 2.6.9及之前版本存在路径遍历漏洞,该漏洞源于openwsmand守护进程的工作路径被设置成了根路径。远程攻击者可通过访特制的HTTP请求利用该漏洞泄露任意文件。
solution:Upgrade openwsman_project openwsman to a higher version than 2.6.9,and avoid the version (,2.6.9]; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_eus to a higher version than 8.1,8.2,8.4,and avoid the version 8.1,8.2,8.4; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.6,8.2,8.4,and avoid the version 7.6,8.2,8.4; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.6,8.2,8.4,and avoid the version 7.6,8.2,8.4; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade fedoraproject fedora to a higher version than 28,29,30,and avoid the version 28,29,30; Upgrade opensuse leap to a higher version than 15.0,42.3,and avoid the version 15.0,42.3