Yeti search and export flaws let authenticated users read data and write files
A user logged into this threat-analysis tool can peek at data or steal files.
Summary
A low-privileged logged-in user of the Yeti forensics intelligence platform can alter search requests to peek into the database and read or write files the service account can reach. Version 2.5.0 and earlier are affected.
Affected when
- A logged-in user account exists
- Default local storage backend in use
- Yeti 2.5.0 or earlier
What to do
Update to 2.5.1 or later. For the flaw with no fixed version yet, check that you run a version newer than 2.5.0 and read the vendor's advisory.
Products and platforms
CVE IDs
Sources
Times
First published
First seen