Medium: glib2

Issue Overview: filecopyfallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used. CVE-2019-12450 Affected Packages: glib2 Note: This advisory is applicable to Amazon Linux 2...

CVE-2020-24367

Incorrect file permissions in BlueStacks 4 through 4.230 on Windows allow a local attacker to escalate privileges by modifying a file that is later executed by a higher-privileged user...

CVE-2020-24367

Incorrect file permissions in BlueStacks 4 through 4.230 on Windows allow a local attacker to escalate privileges by modifying a file that is later executed by a higher-privileged user...

CVE-2020-24367

Incorrect file permissions in BlueStacks 4 through 4.230 on Windows allow a local attacker to escalate privileges by modifying a file that is later executed by a higher-privileged user...

CVE-2020-24367

BlueStacks 4 (up to version 4.230) on Windows is affected by incorrect file permissions that enable a local attacker to escalate privileges by modifying a file that is later executed by a higher-privileged user. This vulnerability is documented across multiple sources (NVD, Red Hat, CNVD, etc.). ...

Intel® Media SDK for Windows* Advisory

Summary: A potential security vulnerability in the Intel® Media SDK for Windows may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-11121 Description: Improper file permissions in the installer for...

CVE-2020-24367: Incorrect Permission Assignment for Critical Resource

Incorrect file permissions in BlueStacks 4 through 4.230 on Windows allow a local attacker to escalate privileges by modifying a file that is later executed by a higher-privileged user...

LogicalDoc installation privilege escalation vulnerability

Summary A local privilege elevation vulnerability exists in the file system permissions of LogicalDoc 8.5.1 installation. Depending on the vector chosen, an attacker can either replace the service binary or replace DLL files loaded by the service, both which get executed by a service thus executi...

CVE-2020-17490

A flaw was found in Salt. The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions. The highest threat from this vulnerability is to confidentiality...

CVE-2020-17490

The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions...

PYSEC-2020-105

The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions...

Code injection

The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions...

PYSEC-2020-105

The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions...

CVE-2020-17490

The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions...

CVE-2020-17490

CVE-2020-17490 affects SaltStack Salt (TLS module) up to version 3002, where the TLS execution module creates certificates with weak file permissions. The root cause is improper permissions on certificate files, potentially exposing private keys and enabling unintended access to sensitive materia...

CVE-2020-17490

The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions...

CVE-2020-17490

The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions...

CVE-2020-17490: Incorrect Permission Assignment for Critical Resource

The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions...

CVE-2020-13536

An exploitable local privilege elevation vulnerability exists in the file system permissions of Moxa MXView series 3.1.8 installation. Depending on the vector chosen, an attacker can either add code to a script or replace a binary. By default MXViewService, which starts as a NT SYSTEM authority...

curl: Cookie exposure due to unexpected file permission change

Summary: libcurl since 7.72.0 changes file specified in CURLOPTCOOKIEJAR to group and world readable, regardless of prior file permissions of an already existing file assuming typical default umask of 022. This is unexpected as typically file permissions of an already existing file are not change...