CVE-2023-32190

Опубликовано: 16 окт. 2024

Источник: nvd

CVSS3: 7.8

EPSS Низкий

Описание

mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable by abusing insecure file operations that run with root privileges.

Ссылки

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32190

EPSS

Процентиль: 10%

0.00201

Низкий

7.8 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVE-2023-32190

CVSS3: 7.8

ubuntu

почти 2 года назад

mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable by abusing insecure file operations that run with root privileges.

CVE-2023-32190

CVSS3: 7.8

redhat

почти 2 года назад

mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable by abusing insecure file operations that run with root privileges.

CVE-2023-32190

CVSS3: 7.8

debian

почти 2 года назад

mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary f ...

GHSA-f97f-26jc-gffx

CVSS3: 7.8

github

почти 2 года назад

mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable by abusing insecure file operations that run with root privileges.

EPSS

Процентиль: 10%

0.00201

Низкий

7.8 High

CVSS3

Дефекты

CWE-125