CVE-2019-19263

GitLab Enterprise Edition EE 8.2 and later through 12.5 has Insecure Permissions...

CVE-2019-19263

Removed by vendor...

CVE-2019-19263

GitLab Enterprise Edition EE 8.2 and later through 12.5 has Insecure Permissions...

CVE-2019-19263

CVE-2019-19263 concerns an insecure permissions issue in GitLab Enterprise Edition (EE) , affecting versions from 8.2 up to 12.5 . The connected sources consistently describe the vulnerability as an Insecure Permissions flaw, without detailing the exact root cause or affected components beyond th...

CVE-2019-19262

GitLab Enterprise Edition (EE) versions 11.9 through 12.5 have an insecure-permissions vulnerability (CVE-2019-19262). The issue concerns improper permissions on components that could enable partial disclosure of sensitive data, notably Grafana metrics, as documented in multiple sources. Affected...

CVE-2019-19262

Removed by vendor...

Code injection

Gitlab Enterprise Edition EE before 12.5.1 has Insecure Permissions issue 2 of 2...

CVE-2019-19086

Gitlab Enterprise Edition EE before 12.5.1 has Insecure Permissions issue 1 of 2...

CVE-2019-19087

Technical details about CVE-2019-19087 are not publicly available in the provided connected documents; only a high-level description of Insecure Permissions in GitLab EE before 12.5.1 is given. Monitor for updates.

CVE-2019-19086

Gitlab Enterprise Edition EE before 12.5.1 has Insecure Permissions issue 1 of 2...

CVE-2019-19086

CVE-2019-19086 affects GitLab Enterprise Edition (EE) prior to 12.5.1, described as Insecure Permissions (issue 1 of 2). Affected component is GitLab EE; root cause is insecure permissions enabling unintended access to data. Public details in connected sources corroborate an information-disclosur...

CVE-2019-19086

Removed by vendor...

Insecure Permission

github.com/sylabs/singularity is vulnerable to insecure permissions. When a user's configuration directory $HOME/.singularity is newly created, it makes directories with insecure permissions 777 on $HOME/.singularity and SINGULARITYCACHEDIR directories, allowing other users to perform malicious...

Singularity Information Disclosure Vulnerability (CNVD-2020-03164)

Singularity is a Linux-based container platform for running standalone applications. A security vulnerability exists in Singularity versions 3.3.0 through 3.5.1, which stems from a program that sets insecure permissions 777 for $HOME/.singularity. An attacker can exploit the vulnerability to...

CVE-2019-19724

Insecure permissions 777 are set on $HOME/.singularity when it is newly created by Singularity version from 3.3.0 to 3.5.1, which could lead to an information leak, and malicious redirection of operations performed against Sylabs cloud services...

CVE-2019-19724

Insecure permissions 777 are set on $HOME/.singularity when it is newly created by Singularity version from 3.3.0 to 3.5.1, which could lead to an information leak, and malicious redirection of operations performed against Sylabs cloud services...

Information disclosure

Insecure permissions 777 are set on $HOME/.singularity when it is newly created by Singularity version from 3.3.0 to 3.5.1, which could lead to an information leak, and malicious redirection of operations performed against Sylabs cloud services...

CVE-2019-19724

Insecure permissions 777 are set on $HOME/.singularity when it is newly created by Singularity version from 3.3.0 to 3.5.1, which could lead to an information leak, and malicious redirection of operations performed against Sylabs cloud services...

CVE-2019-19724

Removed by vendor...

CVE-2019-19724

CVE-2019-19724 affects Singularity 3.3.0–3.5.1, where newly created $HOME/.singularity could have insecure permissions (777), enabling information disclosure and malicious redirection of operations against Sylabs cloud services. Publicly available connected documents show openSUSE advisories (ope...