6.8 Medium
AI Score
Confidence
Low
0.0005 Low
EPSS
Percentile
17.2%
The Security Manager in razorCMS before 0.4 does not verify the permissions of every file owned by the apache user account, which is inconsistent with the documentation and allows local users to have an unspecified impact.
razorcms.co.uk/support/viewtopic.php?f=13&t=325
www.securityfocus.com/bid/34566
exchange.xforce.ibmcloud.com/vulnerabilities/50358
marc.info/?l=full-disclosure&m=123990481506680&w=2
marc.info/?l=full-disclosure&m=123998062108561&w=2