PT-2012-4726
CVE-2012-3453
·
تاريخ النشر
2012-08-07
·
تاريخ التحديث
2012-08-08
الوصف من
CVSS 2.0
3.6
منخفضةالمقاييسAV:L/AC:L/Au:N/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions
logol version 1.5.0
Description
The issue allows local users to delete or overwrite arbitrary files due to world writable permissions for the /var/lib/logol/results directory.
Recommendations
For logol version 1.5.0, consider changing the permissions of the /var/lib/logol/results directory to prevent world writability as a temporary workaround until a patch is available. Restrict access to the /var/lib/logol/results directory to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾