Project

General

Profile

Actions

Bug #6505

closed

It is possible to send an inventory as root

Added by Benoît PECCATTE over 9 years ago. Updated over 1 year ago.

Status:
Rejected
Priority:
N/A
Assignee:
-
Category:
Security
Target version:
Severity:
UX impact:
User visibility:
Effort required:
Priority:
0
Name check:
Fix check:
Regression:

Description

It is possible to input a fake UUID in the inventory
If this UUID is root, it is possible to change some parameters on the server

Actions

Also available in: Atom PDF