The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1074 advisory.

    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

    Security Fix(es):

    * flatpak: file forwarding feature can be used to gain unprivileged access to files (CVE-2021-21381)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of flatpak installed on the remote host is prior to 1.0.9-10. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1625 advisory.

    A sandbox escape flaw was found in the way flatpak handled special tokens in .desktop files. This flaw     allows an attacker to gain access to files that are not ordinarily allowed by the app's permissions. The     highest threat from this vulnerability is to confidentiality and integrity. (CVE-2021-21381)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1068 advisory.

  - flatpak: file forwarding feature can be used to gain unprivileged access to files (CVE-2021-21381)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has flatpak packages installed that are affected by a vulnerability:

  - Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In     Flatpack since version 0.9.4 and before version 1.10.2 has a vulnerability in the file forwarding     feature which can be used by an attacker to gain access to files that would not ordinarily be allowed by     the app's permissions. By putting the special tokens `@@` and/or `@@u` in the Exec field of a Flatpak     app's .desktop file, a malicious app publisher can trick flatpak into behaving as though the user had     chosen to open a target file with their Flatpak app, which automatically makes that file available to the     Flatpak app. This is fixed in version 1.10.2. A minimal solution is the first commit `Disallow @@ and @@U     usage in desktop files`. The follow-up commits `dir: Reserve the whole @@ prefix` and `dir: Refuse to     export .desktop files with suspicious uses of @@ tokens` are recommended, but not strictly required. As a     workaround, avoid installing Flatpak apps from untrusted sources, or check the contents of the exported     `.desktop` files in `exports/share/applications/*.desktop` (typically     `~/.local/share/flatpak/exports/share/applications/*.desktop` and     `/var/lib/flatpak/exports/share/applications/*.desktop`) to make sure that literal filenames do not follow     `@@` or `@@u`. (CVE-2021-21381)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

远程 Redhat Enterprise Linux 7 主机上安装的程序包受到 RHSA-2021: 1002 公告中提及的漏洞的影响。

  - flatpak：文件转发功能可用于获取对文件的非特权访问权限 (CVE-2021-21381)

请注意，Nessus 尚未测试此问题，而是只依赖于应用程序自我报告的版本号。

远程 Redhat Enterprise Linux 8 主机上安装的程序包受到 RHSA-2021: 1073 公告中提及的漏洞的影响。

  - flatpak：文件转发功能可用于获取对文件的非特权访问权限 (CVE-2021-21381)

请注意，Nessus 尚未测试此问题，而是只依赖于应用程序自我报告的版本号。

远程 Redhat Enterprise Linux 8 主机上安装的程序包受到 RHSA-2021: 1074 公告中提及的多个漏洞的影响。

  - flatpak：文件转发功能可用于获取对文件的非特权访问权限 (CVE-2021-21381)

请注意，Nessus 尚未测试此问题，而是只依赖于应用程序自我报告的版本号。

远程主机上安装的 flatpak 版本低于 1.0.9-10。因此，该操作系统受到 ALAS2-2021-1625 公告中提及的漏洞的影响。

  - Flatpak 是一个用于在 Linux 上构建、分发和运行沙盒式桌面应用程序的系统。0.9.4 至 1.10.2 版本的 Flatpack 的文件转发功能中存在一个漏洞，攻击者可利用此漏洞访问通常不被应用程序权限允许的文件。通过在 Flatpak 应用程序的 .desktop 文件的 Exec 字段中放置特殊标记“@@”和/或“@@u”，恶意应用程序发布者可欺骗 flatpak，使其表现为用户选择使用自己的 Flatpak 应用程序来打开目标文件，从而自动使该文件可用于 Flatpak 应用程序。此问题已在 1.10.2 版本中修复。最小限度的解决方案是第一次提交“不允许在桌面文件中使用 @@ 和 @@U”。建议使用后续提交“dir：保留完整的 @@ 前缀”和“dir：拒绝导出可疑地使用了 @@ 标记的 .desktop 文件”，但并非严格要求。作为变通方案，避免安装来自不受信任来源的 Flatpak 应用程序，或检查“exports/share/applications/*.desktop”中导出的“.desktop”文件（通常是“~/.local/share/flatpak/exports/share/applications/*.desktop”和“/var/lib/flatpak/exports/share/applications/*.desktop”），以确保字面值文件名前没有“@@”或“@@u”。(CVE-2021-21381)

请注意，Nessus 尚未测试此问题，而是只依赖于应用程序自我报告的版本号。

远程 CentOS Linux 8 主机上安装的程序包受到 CESA-2021: 1068 公告中提及的多个漏洞的影响。

  - flatpak：文件转发功能可用于获取对文件的非特权访问权限 (CVE-2021-21381)

请注意，Nessus 尚未测试此问题，而是只依赖于应用程序自我报告的版本号。

ID	Name	Product	Family	Published	Updated	Severity
148332	RHEL 8 : flatpak (RHSA-2021:1074)	Nessus	Red Hat Local Security Checks	4/6/2021	11/7/2024	high
148337	Amazon Linux 2 : flatpak (ALAS-2021-1625)	Nessus	Amazon Linux Local Security Checks	4/6/2021	12/11/2024	high
148420	CentOS 8 : flatpak (CESA-2021:1068)	Nessus	CentOS Local Security Checks	4/9/2021	4/9/2021	high
160864	NewStart CGSL CORE 5.05 / MAIN 5.05 : flatpak Vulnerability (NS-SA-2022-0043)	Nessus	NewStart CGSL Local Security Checks	5/10/2022	5/10/2022	high
148215	RHEL 7：flatpak (RHSA-2021: 1002)	Nessus	Red Hat Local Security Checks	3/29/2021	11/7/2024	high
148328	RHEL 8：flatpak (RHSA-2021: 1073)	Nessus	Red Hat Local Security Checks	4/6/2021	11/7/2024	high
148332	RHEL 8：flatpak (RHSA-2021: 1074)	Nessus	Red Hat Local Security Checks	4/6/2021	11/7/2024	high
148337	Amazon Linux 2：flatpak (ALAS-2021-1625)	Nessus	Amazon Linux Local Security Checks	4/6/2021	12/11/2024	high
148420	CentOS 8：flatpak (CESA-2021: 1068)	Nessus	CentOS Local Security Checks	4/9/2021	4/9/2021	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high