PT-2019-1891

CVE-2019-0804

·

Published

2019-02-28

·

Updated

2020-08-24

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Azure Windows Azure Linux Agent (affected versions not specified)
Description An information disclosure issue exists due to improper permission assignment for swap files by the Azure WaLinuxAgent. This could allow a remote attacker to gain unauthorized access to information by reading swap files as an arbitrary user.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Weakness enumeration
CWE-732: Incorrect Permission Assignment for Critical Resource
Related identifiers
CVE-2019-0804
BDU:2019-01545
CESA-2019_1527
DLA-1709-1
DSA-4406-1
OPENSUSE-SU-2019:1106-1
OPENSUSE-SU-2019_1106-1
OPENSUSE-SU-2020:0261-1
OPENSUSE-SU-2020_0261-1
OPENSUSE-SU-2024:11217-1
RHSA-2019:1527
RHSA-2019_1527
SUSE-SU-2019:0603-1
SUSE-SU-2019_0603-1
SUSE-SU-2019:3393-1
SUSE-SU-2019_3393-1
SUSE-SU-2019:3394-1
SUSE-SU-2019_3394-1
SUSE-SU-2020:0440-1
SUSE-SU-2020_0440-1
SUSE-SU-2020:14454-1
SUSE-SU-2020_14454-1
USN-3907-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com