PT-2020-20439
CVE-2020-9024
·
تاريخ النشر
2020-02-17
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 2.0
10
حرجةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Iteris Vantage Velocity Field Unit versions 2.3.1 through 2.4.2
Description
The issue concerns world-writable permissions for certain scripts. Specifically, the
/root/cleardata.pl script, which is executed as root by crond, and the /root/loadperl.sh script, which is executed as root at boot time, have world-writable permissions.Recommendations
For Iteris Vantage Velocity Field Unit version 2.3.1, update the permissions of the
/root/cleardata.pl and /root/loadperl.sh scripts to prevent world-writable access.
For Iteris Vantage Velocity Field Unit version 2.4.2, update the permissions of the /root/cleardata.pl and /root/loadperl.sh scripts to prevent world-writable access. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾