ID de Prueba:	1.3.6.1.4.1.25623.1.0.150943
Categoría:	Databases
Título:	Redis ACL Bypass Vulnerability (GHSA-q4jr-5p56-4xwc)
Resumen:	Redis is prone to an ACL bypass vulnerability.
Descripción:	Summary: Redis is prone to an ACL bypass vulnerability. Vulnerability Insight: Redis does not correctly identify keys accessed by SORT_RO and, as a result, may grant users executing this command access to keys that are not explicitly authorized by the ACL configuration. Affected Software/OS: Redis version 7.0.x prior to 7.0.13 and version 7.2.0. Solution: Update to version 7.0.13, 7.2.1 or later. CVSS Score: 1.7 CVSS Vector: AV:L/AC:L/Au:S/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2023-41053 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UA4MSJ623BH6HP5UHSJD2FOTN3QM5DQS/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YLYNYT52EHR63E7L7SHRTHEPUMAFFDLX/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OLBPIUUD273UGRN2WAYHPVUAULY36QVL/ https://github.com/redis/redis/commit/9e505e6cd842338424e05883521ca1fb7d0f47f6 https://github.com/redis/redis/security/advisories/GHSA-q4jr-5p56-4xwc
Copyright	Copyright (C) 2023 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.