Описание
Weak permissions on the configuration file in the PAM module in Grommunio Gromox 0.5 through 1.x before 1.28 allow a local unprivileged user in the gromox group to have the PAM stack execute arbitrary code upon loading the Gromox PAM module.
Ссылки
- Mailing ListThird Party Advisory
- ExploitIssue TrackingThird Party Advisory
- Mailing ListThird Party Advisory
- ExploitIssue TrackingThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 0.5 (включая) до 1.28 (исключая)
cpe:2.3:a:grommunio:gromox:*:*:*:*:*:*:*:*
EPSS
Процентиль: 13%
0.00043
Низкий
7.8 High
CVSS3
Дефекты
CWE-276
Связанные уязвимости
CVSS3: 7.8
github
больше 3 лет назад
Weak permissions on the configuration file in the PAM module in Grommunio Gromox 0.5 through 1.x before 1.28 allow a local unprivileged user in the gromox group to have the PAM stack execute arbitrary code upon loading the Gromox PAM module.
EPSS
Процентиль: 13%
0.00043
Низкий
7.8 High
CVSS3
Дефекты
CWE-276