CVE-2022-45473

Name of the Vulnerable Software and Affected Versions drachtio-server version 0.8.18

Description The issue concerns the permissions of the /var/log/drachtio directory and the drachtio.log file. Specifically, the directory has a mode of 0777 and the log file has a mode of 0666. This could potentially allow unauthorized access or modification of the log files.

Recommendations For drachtio-server version 0.8.18, consider changing the permissions of the /var/log/drachtio directory and the drachtio.log file to more restrictive settings to minimize the risk of unauthorized access.