Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f97f-26jc-gffx

Опубликовано: 16 окт. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 8.5
CVSS3: 7.8

Описание

mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable by abusing insecure file operations that run with root privileges.

mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable by abusing insecure file operations that run with root privileges.

EPSS

Процентиль: 28%
0.00102
Низкий

8.5 High

CVSS4

7.8 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 1 года назад

mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable by abusing insecure file operations that run with root privileges.

CVSS3: 7.8
redhat
больше 1 года назад

mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable by abusing insecure file operations that run with root privileges.

CVSS3: 7.8
nvd
больше 1 года назад

mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable by abusing insecure file operations that run with root privileges.

CVSS3: 7.8
debian
больше 1 года назад

mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary f ...

EPSS

Процентиль: 28%
0.00102
Низкий

8.5 High

CVSS4

7.8 High

CVSS3

Дефекты

CWE-125