1 matches found
CVE-2025-0374: Incorrect Permission Assignment for Critical Resource
When etcupdate encounters conflicts while merging files, it saves a version containing conflict markers in /var/db/etcupdate/conflicts. This version does not preserve the mode of the input file, and is world-readable. This applies to files that would normally have restricted visibility, such as...
6.5CVSS5.8AI score0.00301EPSS
SaveExploits0References1
20