zmanda / amanda

Amanda Network Backup
https://www.zmanda.com/downloads/
Other
214 stars 107 forks source link

Local privilege escalation #218

Closed silmort closed 1 year ago

silmort commented 1 year ago

Hi Amanda developers,

I'd like to report the vulnerability (local privilege escalation) in the current amanda master 9dd0c8d. I can provide more info, the PoC, and the patch. Should I post this information here? I'm reserving a CVE for this vulnerability now.

prashanth2529 commented 1 year ago

Hi @silmort Request you to use the “Report a vulnerability” button on the “Security” Tab. Security Tab -> “Report a vulnerability” button.

prashanth2529 commented 1 year ago

The issue is being addressed through Security Advisories.