Lucene search
K

Incorrect Permission Assignment for Critical Resource

šŸ—“ļøĀ 26 Jan 2021Ā 00:00:00Reported byĀ https://gitlab.com/gitlab-org/security-products/gemnasium-dbTypeĀ 
gitlab
Ā gitlab
šŸ”—Ā gitlab.comšŸ‘Ā 27Ā Views

ORT generates Apache Traffic Control `ip_allow.config` files with incorrect permissions, allowing bad actors to manipulate CDN cache servers outside the desired range

Related
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2020-17522
26 Jan 202120:36
–circl
CNNVD
Apache Traffic Control å®‰å…Øę¼ę“ž
26 Jan 202100:00
–cnnvd
CNVD
Apache Traffic Control Access Control Error Vulnerability
29 Jan 202100:00
–cnvd
CVE
CVE-2020-17522
26 Jan 202112:42
–cve
Cvelist
CVE-2020-17522
26 Jan 202112:42
–cvelist
EUVD
EUVD-2021-1372
7 Oct 202500:30
–euvd
Github Security Blog
Cache Manipulation Attack in Apache Traffic Control
18 Jun 202122:04
–github
GitLab Advisory Database
Incorrect Permission Assignment for Critical Resource
16 Dec 202100:00
–gitlab
NVD
CVE-2020-17522
26 Jan 202118:15
–nvd
OSV
GHSA-PW59-4QGF-JXR8 Cache Manipulation Attack in Apache Traffic Control
18 Jun 202122:04
–osv
Rows per page

Data

Build on a solid foundation withĀ Vulners data

WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data

Api

Power your application withĀ Vulners API

The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access

App

Assess and manage vulnerabilities withĀ VulnersĀ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

26 Jan 2021 00:00Current
3.1Low risk
Vulners AI Score3.1
CVSS 25
CVSS 3.15.8
EPSS0.03928
27