| शीर्षक | H3C M2 V100R006 Misconfiguration |
|---|
| विवरण | In H3C M2 NAS (private cloud storage) V100R006, there is a insecure configuration vulnerability. The device sets both User and Group property in the boa webserver configuration file to root permissions. This violates the principle of least privilege. Any exploit in the web interface can immediately grant root access, leading to total device compromise. |
|---|
| स्रोत | ⚠️ https://www.notion.so/23f54a1113e7804bae88e76f9fb0cf5b |
|---|
| उपयोगकर्ता | TPCHECKER (UID 88463) |
|---|
| सबमिशन | 29/07/2025 05:41 AM (1 वर्ष पहले) |
|---|
| संयम | 13/08/2025 07:54 AM (15 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 319861 [H3C M2 NAS V100R006 Webserver Configuration अधिकार वृद्धि] |
|---|
| अंक | 15 |
|---|