CVE-2019-15119

Опубликовано: 16 авг. 2019

Источник: nvd

CVSS3: 5.5

CVSS2: 5.8

EPSS Низкий

Описание

lib/install/install.go in cnlh nps through 0.23.2 uses 0777 permissions for /usr/local/bin/nps and/or /usr/bin/nps, leading to a file overwrite by a local user.

Ссылки

https://github.com/cnlh/nps/commit/7178b3380720e910d283036a8d39879a94105515
Patch
Third Party Advisory
https://github.com/cnlh/nps/issues/176
Exploit
Third Party Advisory
https://github.com/cnlh/nps/commit/7178b3380720e910d283036a8d39879a94105515
Patch
Third Party Advisory
https://github.com/cnlh/nps/issues/176
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ehang-io:nps:*:*:*:*:*:*:*:*

Версия до 0.23.2 (включая)

EPSS

Процентиль: 26%

0.0009

Низкий

5.5 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-732

Связанные уязвимости

GHSA-2vp2-8m5j-4rjx