Skip to content
Noroxi

sandstorm records

4 published records for vendor sandstorm.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

4 records
  • CVE-2017-6199
    40Plan

    A remote attacker could bypass the Sandstorm organization restriction before build 0.203 via a comma in an email-address field.

    CriticalCVSS 9.8No exploitEPSS 2%

    sandstorm · sandstormFeb 6, 2018

  • CVE-2017-6201
    33Monitor

    A Server Side Request Forgery vulnerability exists in the install app process in Sandstorm before build 0.203.

    HighCVSS 8.1No exploitEPSS 1%

    sandstorm · sandstormFeb 6, 2018

  • CVE-2017-6200
    27Monitor

    Sandstorm before build 0.203 allows remote attackers to read any specified file under /etc or /run via the sandbox backup function.

    MediumCVSS 6.5No exploitEPSS 2%

    sandstorm · sandstormFeb 6, 2018

  • CVE-2017-6198
    26Monitor

    The Supervisor in Sandstorm doesn't set and enforce the resource limits of a process.

    MediumCVSS 6.5No exploitEPSS 1%

    sandstorm · sandstormFeb 6, 2018