Lucene search
+L

Incorrect Permission Assignment for Critical Resource

🗓️ 26 Jan 2021 00:00:00Reported by https://gitlab.com/gitlab-org/security-products/gemnasium-dbType 
gitlab
 gitlab
🔗 gitlab.com👁 39 Views

ORT generates Apache Traffic Control `ip_allow.config` files with incorrect permissions, allowing bad actors to manipulate CDN cache servers outside the desired range

Related
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2020-17522
26 Jan 202120:36
circl
CNNVD
Apache Traffic Control 安全漏洞
26 Jan 202100:00
cnnvd
CNVD
Apache Traffic Control Access Control Error Vulnerability
29 Jan 202100:00
cnvd
CVE
CVE-2020-17522
26 Jan 202112:42
cve
Cvelist
CVE-2020-17522
26 Jan 202112:42
cvelist
EUVD
EUVD-2021-1372
7 Oct 202500:30
euvd
Github Security Blog
Cache Manipulation Attack in Apache Traffic Control
18 Jun 202122:04
github
GitLab Advisory Database
Incorrect Permission Assignment for Critical Resource
16 Dec 202100:00
gitlab
NVD
CVE-2020-17522
26 Jan 202118:15
nvd
OSV
GHSA-PW59-4QGF-JXR8 Cache Manipulation Attack in Apache Traffic Control
18 Jun 202122:04
osv
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

26 Jan 2021 00:00Current
3.1Low risk
Vulners AI Score3.1
CVSS 25
CVSS 3.15.8
EPSS0.03928
39