Bug #6505: It is possible to send an inventory as root - Rudder - Issue Tracker

Actions

Bug #6505

closed

It is possible to send an inventory as root

Added by Benoît PECCATTE about 9 years ago. Updated 9 months ago.

Status:

Rejected

Priority:

N/A

Assignee:

-

Category:

Security

Target version:

Pull Request:

Severity:

UX impact:

User visibility:

Effort required:

Priority:

0

Name check:

Fix check:

Regression:

Description

It is possible to input a fake UUID in the inventory
If this UUID is root, it is possible to change some parameters on the server

Actions

Also available in: Atom PDF