Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-259x-v826-2fcj

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

IBM SPSS Modeler 16.0 before 16.0.0.1 on UNIX does not properly drop group privileges, which allows local users to bypass intended file-access restrictions by leveraging (1) gid 0 or (2) root's group memberships.

IBM SPSS Modeler 16.0 before 16.0.0.1 on UNIX does not properly drop group privileges, which allows local users to bypass intended file-access restrictions by leveraging (1) gid 0 or (2) root's group memberships.

EPSS

Процентиль: 19%
0.0006
Низкий

Связанные уязвимости

nvd
около 11 лет назад

IBM SPSS Modeler 16.0 before 16.0.0.1 on UNIX does not properly drop group privileges, which allows local users to bypass intended file-access restrictions by leveraging (1) gid 0 or (2) root's group memberships.

EPSS

Процентиль: 19%
0.0006
Низкий