Lucene search

K
prionPRIOn knowledge basePRION:CVE-2016-10538
HistoryMay 31, 2018 - 8:29 p.m.

Design/Logic Flaw

2018-05-3120:29:00
PRIOn knowledge base
www.prio-n.com
1

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

41.1%

The package node-cli before 1.0.0 insecurely uses the lock_file and log_file. Both of these are temporary, but it allows the starting user to overwrite any file they have access to.

CPENameOperatorVersion
clilt1.0.0
debian_linuxeq8.0

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

41.1%