CVE-2018-1000500

8.1

HIGHCVSS v3

Published

June 26, 2018

CVSS v2

6.8 MEDIUM

Affected

2 projects

Assigned by

MITRE

Severity scale

010

Description

Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbitrary code execution. This attack appear to be exploitable via Simply download any file over HTTPS using "busybox wget https://compromised-domain.com/important-file".

busybox

Docker HubBusybox base image.

< 1.32.0NVD

busybox

NPMthis zero-dependency package will provide a collection of high-level functions to to build, test, and deploy webapps

< 1.32.0NVD

More on this CVE

NVD↗GitHub Advisory↗

Security Advisories

CVE-2018-1000500

Description

More on this CVE