CVE-2020-10236

2020-03-0916:15:12

Google

osv.dev

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

An issue was discovered in Froxlor before 0.10.14. It created files with static names in /tmp during installation if the installation directory was not writable. This allowed local attackers to cause DoS or disclose information out of the config files, because of _createUserdataConf in install/lib/class.FroxlorInstall.php.

CPENameOperatorVersion
froxloreq0.9.33-rc2
froxloreq0.9.38.3
froxloreq0.9.28.1
froxloreq0.10.2
froxloreq0.9.34.1
froxloreq0.9.18.1
froxloreq0.9.37
froxloreq0.10.7
froxloreq0.10.4
froxloreq0.9.39.4

Name	Operator	Version
froxlor	eq	0.9.33-rc2
froxlor	eq	0.9.38.3
froxlor	eq	0.9.28.1
froxlor	eq	0.10.2
froxlor	eq	0.9.34.1
froxlor	eq	0.9.18.1
froxlor	eq	0.9.37
froxlor	eq	0.10.7
froxlor	eq	0.10.4
froxlor	eq	0.9.39.4