Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2021.0146
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2021-0146)
Zusammenfassung:	The remote host is missing an update for the 'discover' package(s) announced via the MGASA-2021-0146 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'discover' package(s) announced via the MGASA-2021-0146 advisory. Vulnerability Insight: Discover fetches the description and related texts of some applications/plugins from store.kde.org. That text is displayed to the user, after turning into a clickable link any part of the text that looks like a link. This is done for any kind of link, be it smb:// nfs:// etc. when in fact it only makes sense for http/https links. Opening links that the user has clicked on is not very problematic but can be used to chain to other attack vectors. Given the intended functionality of the feature is just for http/https links it makes sense to do that verification (CVE-2021-28117). Affected Software/OS: 'discover' package(s) on Mageia 7, Mageia 8. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2021-28117 https://github.com/KDE/discover/commit/fcd3b30552bf03a384b1a16f9bb8db029c111356 https://github.com/KDE/discover/releases https://userbase.kde.org/Discover
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.