GHSA-J9WR-MJ69-CQMV Froxlor Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in Froxlor through 0.10.15. The installer wrote configuration parameters including passwords into files in /tmp, setting proper permissions only after writing the sensitive data. A local attacker could have disclosed the information if he read the file at the right time,...

PT-2020-11992

Name of the Vulnerable Software and Affected Versions Froxlor versions prior to 0.10.14 Description An issue in the installation process of Froxlor allowed local attackers to cause denial of service DoS or disclose information from configuration files. This occurred when the installation director...

PT-2020-11993

Name of the Vulnerable Software and Affected Versions Froxlor versions prior to 0.10.16 Description An issue was discovered where the installer wrote configuration parameters, including passwords, into files in /tmp without proper permissions, allowing a local attacker to disclose the information...