PT-2017-10957
CVE-2017-1000383
·
تاريخ النشر
2017-10-31
·
تاريخ التحديث
2017-11-27
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
GNU Emacs version 25.3.1
Description
The issue concerns GNU Emacs ignoring umask when creating a backup save file, resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the emacs binary.
Recommendations
For GNU Emacs version 25.3.1, consider adjusting the umask setting manually to ensure backup files are created with the intended permissions until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾