« Volver al listado

CVE-2012-4506

Estado: ModificadaMedia (4.6)—

Vulnerabilidad de salto de directorio en gitolite v3.x antes de v3.1, cuando repositorios wild card y un patrón que coincida con "../" está activado, permite a usuarios remotos autenticados crear repositorios arbitrarios y posiblemente realizar otras acciones a través de un .. (punto punto) en un nombre de repositorio.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Gitolite — GitoliteSitaram Chamarty — Gitolite

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-4506",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.6,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:H/Au:S/C:P/I:P/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "HIGH",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-10-22T23:55:07.243",
  "references": [
    {
      "url": "http://secunia.com/advisories/50896",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2012/10/10/1",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2012/10/10/2",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/55853",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79130",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://github.com/sitaramc/gitolite/commit/f636ce3ba3e340569b26d1e47b9d9b62dd8a3bf2",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://groups.google.com/forum/#%21topic/gitolite/K9SnQNhCQ-0/discussion",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://secunia.com/advisories/50896",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2012/10/10/1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2012/10/10/2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/55853",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79130",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://github.com/sitaramc/gitolite/commit/f636ce3ba3e340569b26d1e47b9d9b62dd8a3bf2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://groups.google.com/forum/#%21topic/gitolite/K9SnQNhCQ-0/discussion",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Directory traversal vulnerability in gitolite 3.x before 3.1, when wild card repositories and a pattern matching \"../\" are enabled, allows remote authenticated users to create arbitrary repositories and possibly perform other actions via a .. (dot dot) in a repository name."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de salto de directorio en gitolite v3.x antes de v3.1, cuando repositorios wild card y un patrón que coincida con \"../\" está activado, permite a usuarios remotos autenticados crear repositorios arbitrarios y posiblemente realizar otras acciones a través de un .. (punto punto) en un nombre de repositorio."
    }
  ],
  "lastModified": "2026-06-16T23:45:13.627",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:gitolite:gitolite:3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "05997028-392C-4287-995D-398C5EFF9F5E"
            },
            {
              "criteria": "cpe:2.3:a:gitolite:gitolite:3.02:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EBCDE647-25DA-4238-81FD-6AFE0B23CE45"
            },
            {
              "criteria": "cpe:2.3:a:gitolite:gitolite:3.03:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AE60C0B8-60FB-4DDA-A45E-A949049AFD92"
            },
            {
              "criteria": "cpe:2.3:a:gitolite:gitolite:3.04:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2B181E8E-6533-43C2-98B4-71194B318E07"
            },
            {
              "criteria": "cpe:2.3:a:sitaram_chamarty:gitolite:3.01:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "92A8D9B7-7EAE-486D-B41F-C092B4FA2552"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}