Arbitrary File Access in Apache Karaf with SSH Access

CVE-2018-11786

What is CVE-2018-11786?

In versions of Apache Karaf prior to 4.2.0, a security issue exists where the sshd service, if enabled, allows users with console rights to access and modify files within the file system. This potential exposure can lead to unauthorized access to sensitive data, as any user with SSH capabilities can read and write files accessible to the Karaf process. Although implementing chroot can help restrict root directory accesses, the inherent risk remains for those with SSH access, warranting additional security measures like proper policy configurations.

References