CVE:CVE-2019-13033
CNNVD:CNNVD-202006-1267
CISOfy Lynis是荷兰CISOfy公司的一款支持多个平台的系统安全审核工具。
CISOfy Lynis 2.x版本至2.7.5版本中存在安全漏洞。攻击者可通过观察进程列表利用该漏洞获取许可证密钥。
solution:Upgrade cisofy lynis to a higher version than 2.7.5,and avoid the version [2.0.0,2.7.5]; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade fedoraproject fedora to a higher version than 30,31,and avoid the version 30,31