PatchTheCVEshaman project vulnerabilities
Recent CVEs affecting shaman project products. 1 tracked.
shaman project has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-02-12. Highest priority: CVE-2011-4338 (score 41/100).
- CVE-2011-4338 HIGH 7.8 DOWNGRADE Shaman 1.0.9: Users can add the line askforpwd=false to his shaman.conf file, without entering the root passwo
FAQ
How do I fix shaman project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is shaman project being exploited right now?
None of the tracked shaman project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which shaman project CVE should I patch first?
CVE-2011-4338 currently ranks highest (41/100): Shaman 1.0.9: Users can add the line askforpwd=false to his shaman.conf file, without entering the root passwo.