CVE-2018-10857: Infoleak
Published Jul 16, 2018
·Updated
git-annex is vulnerable to a private data exposure and exfiltration attack. It could expose the content of files located outside the git-annex repository, or content from a private web server on localhost or the LAN.
Affected Software
2 affected components
Git-annex Project Git-annex
Debian Debian Linux=8.0
Event History
Jul 16, 2018
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-10857?
CVE-2018-10857 is associated with a vulnerability that could lead to private data exposure and exfiltration.
2
How do I fix CVE-2018-10857?
To mitigate CVE-2018-10857, update to the latest version of git-annex that addresses this vulnerability.
3
What types of data could be exposed due to CVE-2018-10857?
CVE-2018-10857 could expose the contents of files located outside the git-annex repository or data from a private web server.
4
Who is primarily affected by CVE-2018-10857?
Users of git-annex, particularly those running outdated versions, are primarily affected by CVE-2018-10857.
5
Is there a specific operating system that CVE-2018-10857 affects?
CVE-2018-10857 has been identified in Debian Linux version 8.0 when using git-annex.