CVE-2023-40361

CVE-2023-40361 affects SECUDOS Qiata (DOMOS OS) 4.13. The issue arises from insecure permissions on the previewRm.sh daily cronjob: every user on the system has write access to previewRm.sh, which is executed by root, enabling a low-privilege user to modify the script and potentially escalate pri...

CVE-2022-42150

TinyLab linux-lab v1.1-rc1 and cloud-labv0.8-rc2, v1.1-rc1 are vulnerable to insecure permissions. The default configuration could cause Container Escape...

CVE-2022-42150

TinyLab linux-lab v1.1-rc1 and cloud-labv0.8-rc2, v1.1-rc1 are vulnerable to insecure permissions. The default configuration could cause Container Escape...

Default configuration

TinyLab linux-lab v1.1-rc1 and cloud-labv0.8-rc2, v1.1-rc1 are vulnerable to insecure permissions. The default configuration could cause Container Escape...

CVE-2022-42150

TinyLab linux-lab v1.1-rc1 and cloud-labv0.8-rc2, v1.1-rc1 are vulnerable to insecure permissions. The default configuration could cause Container Escape...

CVE-2022-42150

TinyLab linux-lab v1.1-rc1 and cloud-labv0.8-rc2, v1.1-rc1 are vulnerable to insecure permissions. The default configuration could cause Container Escape...

PT-2023-27411 · Secudos · Secudos Qiata

Name of the Vulnerable Software and Affected Versions: SECUDOS Qiata DOMOS OS version 4.13 Description: The issue is related to insecure permissions for the previewRm.sh daily cronjob. An attacker needs access as a low-privileged user to the underlying DOMOS system to exploit this. Every user on...

PT-2023-14066 · Tinylab · Tinylab Linux-Lab +1

Name of the Vulnerable Software and Affected Versions: TinyLab linux-lab version 1.1-rc1 TinyLab cloud-lab version 0.8-rc2 Description: The default configuration of TinyLab linux-lab and cloud-lab could cause Container Escape due to insecure permissions. Recommendations: For TinyLab linux-lab...

CVE-2022-42150

TinyLab linux-lab v1.1-rc1 and cloud-labv0.8-rc2, v1.1-rc1 are vulnerable to insecure permissions. The default configuration could cause Container Escape...

CVE-2022-42150

This CVE (CVE-2022-42150) affects TinyLab linux-lab v1.1-rc1 and cloud-lab v0.8-rc2 (also v1.1-rc1). The root cause is insecure permissions arising from the default configuration, which could enable Container Escape. Public details in connected sources corroborate the vulnerability and its impact...

Medium: docker

Issue Overview: A flaw was found in Moby. This flaw allows an attacker to bypass primary group restrictions due to a flaw in the supplementary group access setup. CVE-2022-36109 Docker version 20.10.15, build fd82621 is vulnerable to Insecure Permissions. Unauthorized users outside the Docker...

TSplus Security Vulnerabilities

TSplus is a remote access software software from TSplus. A security vulnerability exists in TSplus Remote Work version 16.0.0.0, which originates from setting insecure file and folder permissions that could allow a malicious user to manipulate the contents of a file or change a legitimate file in...

CVE-2023-44809

D-Link device DIR-820L 1.05B03 is vulnerable to Insecure Permissions...

CVE-2023-44809

D-Link device DIR-820L 1.05B03 is vulnerable to Insecure Permissions...

CVE-2023-44809

D-Link device DIR-820L 1.05B03 is vulnerable to Insecure Permissions...

Design/Logic Flaw

D-Link device DIR-820L 1.05B03 is vulnerable to Insecure Permissions...

Ubuntu 18.04 ESM : Bundler vulnerability (USN-4870-1)

The remote Ubuntu 18.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4870-1 advisory. It was discovered that Bundler incorrectly created directories with insecure permissions in /tmp. An attacker could write malicious libraries to this location for...

CVE-2023-44809

D-Link device DIR-820L 1.05B03 is vulnerable to Insecure Permissions...

CVE-2023-44809

D-Link device DIR-820L 1.05B03 is vulnerable to Insecure Permissions...

CVE-2023-44809

CVE-2023-44809 affects the D-Link DIR-820L router (firmware 1.05B03) due to inadequate access control, described as Insecure Permissions. The connected PT-2023-6235 entry notes that exploitation could allow a remote attacker to execute arbitrary code. There is no public information in the provide...