PatchTheCVEshaman vulnerabilities and fixes
Recent CVEs affecting shaman, with upgrade or downgrade steps. 1 tracked.
shaman has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-02-12. Highest priority: CVE-2011-4338 (score 41/100).
- CVE-2011-4338 HIGH 7.8 DOWNGRADE Shaman 1.0.9: Users can add the line askforpwd=false to his shaman.conf file, without entering the root passwo
FAQ
How do I fix shaman vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is shaman being exploited right now?
None of the tracked shaman CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which shaman CVE should I patch first?
CVE-2011-4338 currently ranks highest (41/100): Shaman 1.0.9: Users can add the line askforpwd=false to his shaman.conf file, without entering the root passwo.