Lucene search
+L

3 matches found

osv_cve
osv_cve
•added 2019/01/03 1:29 a.m.•23 views

CVE-2018-20131

The Code42 app before 6.8.4, as used in Code42 for Enterprise, on Linux installs with overly permissive permissions on the /usr/local/crashplan/log directory. This allows a user to manipulate symbolic links to escalate privileges, or show the contents of sensitive files that a regular user would...

7.8CVSS5.8AI score0.00303EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/01/03 12:00 a.m.•9 views

PT-2019-9999

Name of the Vulnerable Software and Affected Versions Code42 for Enterprise versions prior to 6.8.4 Description The issue allows a user to manipulate symbolic links to escalate privileges or access sensitive files due to overly permissive permissions on the /usr/local/crashplan/log directory...

7.8CVSS0.00303EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/01/03 12:00 a.m.•7 views

CVE-2018-20131: Incorrect Permission Assignment for Critical Resource

The Code42 app before 6.8.4, as used in Code42 for Enterprise, on Linux installs with overly permissive permissions on the /usr/local/crashplan/log directory. This allows a user to manipulate symbolic links to escalate privileges, or show the contents of sensitive files that a regular user would...

7.8CVSS5.8AI score0.00303EPSS
SaveExploits0References2
Rows per page
Query Builder