CVE-2009-1462

2009-04-2816:00:00

mitre

www.cve.org

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

17.1%

JSON

The Security Manager in razorCMS before 0.4 does not verify the permissions of every file owned by the apache user account, which is inconsistent with the documentation and allows local users to have an unspecified impact.

References

marc.info/?l=full-disclosure&m=123990481506680&w=2

marc.info/?l=full-disclosure&m=123998062108561&w=2

razorcms.co.uk/support/viewtopic.php?f=13&t=325

www.securityfocus.com/bid/34566

exchange.xforce.ibmcloud.com/vulnerabilities/50358