Red Hat Security AdvisoryRHSA-2020:3803
bash security update
Released 2020-09-22 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server AUS (v. 7.4) bash-4.2.46-30.el7_4
- Red Hat Enterprise Linux Server E4S (v. 7.4) bash-4.2.46-30.el7_4
- Red Hat Enterprise Linux Server Optional AUS (v. 7.4) bash-doc-4.2.46-30.el7_4
- Red Hat Enterprise Linux Server Optional E4S (v. 7.4) bash-doc-4.2.46-30.el7_4
- Red Hat Enterprise Linux Server Optional TUS (v. 7.4) bash-doc-4.2.46-30.el7_4
- Red Hat Enterprise Linux Server TUS (v. 7.4) bash-4.2.46-30.el7_4
Fixes 1 record
Priority LOW 34
rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with the permissions of the shell.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00402 · Published 2019-03-22 · Partial fix CWE-862
