Design/Logic Flaw

2014-01-2601:55:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Secunia CSI Agent 6.0.0.15017 and earlier, 6.0.1.1007 and earlier, and 7.0.0.21 and earlier, when running on Red Hat Linux, uses world-readable and world-writable permissions for /etc/csia_config.xml, which allows local users to change CSI Agent configuration by modifying this file.

CPENameOperatorVersion
csi_agentge6.0.0
csi_agentle6.0.0.15017
csi_agentge6.0.1
csi_agentle6.0.1.1007
csi_agentge7.0.0
csi_agentle7.0.0.21

Name	Operator	Version
csi_agent	ge	6.0.0
csi_agent	le	6.0.0.15017
csi_agent	ge	6.0.1
csi_agent	le	6.0.1.1007
csi_agent	ge	7.0.0
csi_agent	le	7.0.0.21

References

osvdb.org/101901

secunia.com/advisories/56380

secunia.com/vulnerability_scanning/corporate/release-history/

www.securityfocus.com/bid/64775

exchange.xforce.ibmcloud.com/vulnerabilities/90230