Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2012-3492

Опубликовано: 19 сент. 2012
Источник: redhat
CVSS2: 3.6
EPSS Низкий

Описание

The filesystem authentication (condor_io/condor_auth_fs.cpp) in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 uses authentication directories even when they have weak permissions, which allows remote attackers to impersonate users by renaming a user's authentication directory.

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=848218condor: lock directories created mode 0777 allow for FS-based authentication challenge bypass

EPSS

Процентиль: 88%
0.03184
Низкий

3.6 Low

CVSS2

Связанные уязвимости

ubuntu
около 14 лет назад

The filesystem authentication (condor_io/condor_auth_fs.cpp) in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 uses authentication directories even when they have weak permissions, which allows remote attackers to impersonate users by renaming a user's authentication directory.

nvd
около 14 лет назад

The filesystem authentication (condor_io/condor_auth_fs.cpp) in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 uses authentication directories even when they have weak permissions, which allows remote attackers to impersonate users by renaming a user's authentication directory.

debian
около 14 лет назад

The filesystem authentication (condor_io/condor_auth_fs.cpp) in Condor ...

github
больше 4 лет назад

The filesystem authentication (condor_io/condor_auth_fs.cpp) in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 uses authentication directories even when they have weak permissions, which allows remote attackers to impersonate users by renaming a user's authentication directory.

EPSS

Процентиль: 88%
0.03184
Низкий

3.6 Low

CVSS2