PYSEC-2019-181

Python keyring lib before 0.10 created keyring files with world-readable permissions...

Code injection

Python keyring lib before 0.10 created keyring files with world-readable permissions...

CVE-2012-5577

Python keyring lib before 0.10 created keyring files with world-readable permissions...

CVE-2012-5577

Python keyring lib before 0.10 created keyring files with world-readable permissions...

CVE-2012-5577

Python keyring lib before 0.10 created keyring files with world-readable permissions...

CVE-2012-5577

CVE-2012-5577 affects the Python keyring library prior to 0.10, where keyring files were created with world-readable permissions. This is the concrete detail available across the connected sources; no additional exploit vectors, systems, or remediation steps are specified in the provided document...

CVE-2012-5577: Incorrect Default Permissions

Python keyring lib before 0.10 created keyring files with world-readable permissions...

PT-2019-6792

Name of the Vulnerable Software and Affected Versions Python keyring lib versions prior to 0.10 Description The issue concerns the Python keyring library, where versions before 0.10 created keyring files with world-readable permissions. This could potentially expose sensitive information...

PT-2019-13867 · Mitsubishi · Me-Rtu

Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric Europe B.V. ME-RTU devices versions 2.02 and earlier INEA ME-RTU devices versions 3.0 and earlier Description: An issue allows an attacker to read sensitive configuration settings due to insecure permission assignment. The...

Ruby_parser-legacy Incorrect Permission Assignment for Critical Resource

The rubyparser-legacy aka legacy gem 1.0.0 for Ruby allows local privilege escalation because of world-writable files. For example, if the brakeman gem which has a legacy dependency 4.5.0 through 4.7.0 is used, a local user can insert malicious code into the...

Insecure File Permission

rubyparser-legacy has insecure file permission configured on its Ruby files. World-writable Ruby files would allow a local user to insert malicious Ruby code into several Ruby files, which would be executed when the library is used...

CVE-2019-18409

The rubyparser-legacy aka legacy gem 1.0.0 for Ruby allows local privilege escalation because of world-writable files. For example, if the brakeman gem which has a legacy dependency 4.5.0 through 4.7.0 is used, a local user can insert malicious code into the...

CVE-2019-18409

The rubyparser-legacy aka legacy gem 1.0.0 for Ruby allows local privilege escalation because of world-writable files. For example, if the brakeman gem which has a legacy dependency 4.5.0 through 4.7.0 is used, a local user can insert malicious code into the...

Design/Logic Flaw

The rubyparser-legacy aka legacy gem 1.0.0 for Ruby allows local privilege escalation because of world-writable files. For example, if the brakeman gem which has a legacy dependency 4.5.0 through 4.7.0 is used, a local user can insert malicious code into the...

CVE-2019-18409

The CVE-2019-18409 entry concerns the ruby_parser-legacy gem (version 1.0.0) for Ruby, where local privilege escalation is possible due to world-writable files. The Red Hat and other sources reiterate that, for example, if the brakeman gem (with legacy dependency) versions 4.5.0–4.7.0 are used, a...

CVE-2019-18409

The rubyparser-legacy aka legacy gem 1.0.0 for Ruby allows local privilege escalation because of world-writable files. For example, if the brakeman gem which has a legacy dependency 4.5.0 through 4.7.0 is used, a local user can insert malicious code into the...

CVE-2019-18409

The rubyparser-legacy aka legacy gem 1.0.0 for Ruby allows local privilege escalation because of world-writable files. For example, if the brakeman gem which has a legacy dependency 4.5.0 through 4.7.0 is used, a local user can insert malicious code into the...

CVE-2019-18409: Incorrect Permission Assignment for Critical Resource

The rubyparser-legacy aka legacy gem 1.0.0 for Ruby allows local privilege escalation because of world-writable files. For example, if the brakeman gem which has a legacy dependency 4.5.0 through 4.7.0 is used, a local user can insert malicious code into the...

PT-2019-15394

Name of the Vulnerable Software and Affected Versions ruby parser-legacy gem version 1.0.0 brakeman gem versions 4.5.0 through 4.7.0 Description The issue allows local privilege escalation due to world-writable files. A local user can insert malicious code into the ruby parser-legacy-1.0.0/lib/ru...

ruby_parser-legacy world writable files allow local privilege escalation

The rubyparser-legacy aka legacy gem 1.0.0 for Ruby allows local privilege escalation because of world-writable files. For example, if the brakeman gem which has a legacy dependency 4.5.0 through 4.7.0 is used, a local user can insert malicious code into the...