CVE-2026-88837: Red Hat Hardened Images, заобикаляне на вход и права

Описание

Оригинално описание

BusyBox httpd treats yescrypt ($y$) password hashes as plaintext during Basic Authentication, inverting the authentication check.

Засегнати продукти

• Red Hat Red Hat Hardened Images: 1.37.0-9.1.hum1 преди *

Вид слабост

• CWE-305 Заобикаляне на автентикация чрез първична уязвимост

История

Други уязвимости в Red Hat Red Hat Hardened Images

• 3.7CVE-2026-115456
• 6.5CVE-2026-115455
• 5.9CVE-2026-114691
• 6.2CVE-2026-114690
• 3.5CVE-2026-85498

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-88837
• https://nvd.nist.gov/vuln/detail/CVE-2026-88837
• https://access.redhat.com/errata/RHSA-2026:72111
• https://access.redhat.com/security/cve/CVE-2026-88837
• https://bugzilla.redhat.com/show_bug.cgi?id=2531351