CVE-2019-16354

The File Session Manager in Beego 1.10.0 allows local users to read session files because there is a race condition involving file creation within a directory with weak permissions...

CVE-2019-16354

CVE-2019-16354 affects Beego’s File Session Manager. A race condition in file creation within a directory with weak permissions allows a local attacker to read session files. Publicly documented impact centers on Beego 1.10.0; multiple advisories indicate the issue persists across older Beego rel...