Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7x7f-q6wr-wc4w

Опубликовано: 19 фев. 2022
Источник: github
Github: Не прошло ревью

Описание

snapd 2.54.2 and earlier created ~/snap directories in user home directories without specifying owner-only permissions. This could allow a local attacker to read information that should have been private. Fixed in snapd versions 2.54.3+18.04, 2.54.3+20.04 and 2.54.3+21.10.1

snapd 2.54.2 and earlier created ~/snap directories in user home directories without specifying owner-only permissions. This could allow a local attacker to read information that should have been private. Fixed in snapd versions 2.54.3+18.04, 2.54.3+20.04 and 2.54.3+21.10.1

EPSS

Процентиль: 18%
0.0026
Низкий

Дефекты

CWE-276

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 4 лет назад

snapd 2.54.2 and earlier created ~/snap directories in user home directories without specifying owner-only permissions. This could allow a local attacker to read information that should have been private. Fixed in snapd versions 2.54.3+18.04, 2.54.3+20.04 and 2.54.3+21.10.1

CVSS3: 5.5
nvd
больше 4 лет назад

snapd 2.54.2 and earlier created ~/snap directories in user home directories without specifying owner-only permissions. This could allow a local attacker to read information that should have been private. Fixed in snapd versions 2.54.3+18.04, 2.54.3+20.04 and 2.54.3+21.10.1

CVSS3: 5.5
debian
больше 4 лет назад

snapd 2.54.2 and earlier created ~/snap directories in user home direc ...

CVSS3: 8.8
altlinux
больше 4 лет назад

ALT-PU-2022-1765: package `snapd` update to version 2.54.3-alt1

CVSS3: 8.8
altlinux
больше 4 лет назад

ALT-PU-2022-1345: package `snapd` update to version 2.54.3-alt1

EPSS

Процентиль: 18%
0.0026
Низкий

Дефекты

CWE-276