PT-2023-20623 · Ox Software Gmbh+1 · Ox App Suite+1
CVSS v3.1
3.3
Baixa
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
No specific software name or version is mentioned in the provided descriptions.
Description
The issue concerns default permissions for a properties file being too permissive, allowing local system users to read potentially sensitive information. The default permissions for
noreply.properties were updated during package installation to address this. No publicly available exploits are known.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Insecure Storage of Sensitive Information
Incorrect Permission
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Ox App Suite
Open-Xchange Appsuite Backend