Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5mqj-v3fr-pg3x

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

In the Zstandard command-line utility prior to v1.4.1, output files were created with default permissions. Correct file permissions (matching the input) would only be set at completion time. Output files could therefore be readable or writable to unintended parties.

In the Zstandard command-line utility prior to v1.4.1, output files were created with default permissions. Correct file permissions (matching the input) would only be set at completion time. Output files could therefore be readable or writable to unintended parties.

EPSS

Процентиль: 22%
0.00074
Низкий

Дефекты

CWE-276

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 5 лет назад

In the Zstandard command-line utility prior to v1.4.1, output files were created with default permissions. Correct file permissions (matching the input) would only be set at completion time. Output files could therefore be readable or writable to unintended parties.

CVSS3: 5.5
redhat
почти 5 лет назад

In the Zstandard command-line utility prior to v1.4.1, output files were created with default permissions. Correct file permissions (matching the input) would only be set at completion time. Output files could therefore be readable or writable to unintended parties.

CVSS3: 5.5
nvd
почти 5 лет назад

In the Zstandard command-line utility prior to v1.4.1, output files were created with default permissions. Correct file permissions (matching the input) would only be set at completion time. Output files could therefore be readable or writable to unintended parties.

CVSS3: 5.5
debian
почти 5 лет назад

In the Zstandard command-line utility prior to v1.4.1, output files we ...

CVSS3: 5.5
fstec
больше 6 лет назад

Уязвимость библиотеки для сжатия данных Zstandard, связанная с настройками прав доступа по умолчанию, позволяющая нарушителю получить доступ к конфиденциальным данным

EPSS

Процентиль: 22%
0.00074
Низкий

Дефекты

CWE-276