Unrestricted access to OS file system in SFTP service in Infinera G42
version R6.1.3 allows remote authenticated users to read/write OS files
via SFTP connections.
Details: Account members of the Network Administrator profile can access the
target machine via SFTP with the same credentials used for SSH CLI
access and are able to read all files according to the OS permission instead of remaining inside the chrooted directory position.
References
Configurations
No configuration.
History
03 Jul 2025, 15:13
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-02 10:15
Updated : 2025-07-03 15:13
NVD link : CVE-2025-27024
Mitre link : CVE-2025-27024
CVE.ORG link : CVE-2025-27024
JSON object : View
Products Affected
No product.
CWE
CWE-280
Improper Handling of Insufficient Permissions or Privileges