Incorrect Permission Assignment For Critical Resource

org.apache.apisix:apisix-plugin-runner is vulnerable to Incorrect Permission Assignment for Critical Resource. The vulnerability is due to improper file permission settings caused by insecure local listening file permissions, allowing a local attacker to elevate privileges...

Download to arbitrary folder can lead to RCE

Summary A web UI user can store files anywhere on the pyLoad server and gain command execution by abusing scripts. Details When a user creates a new package, a subdirectory is created within the /downloads folder to store files. This new directory name is derived from the package name, except a...

PT-2023-27413 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue allows an authenticated user to change installation files due to incorrect file permission settings. Recommendations: For IBM InfoSphere Information Server version 11.7,...

Security Bulletin: InfoSphere Information Server is vulnerable due to improper access control (CVE-2023-40363)

Summary An improper access control vulnerablity in InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2023-40363 DESCRIPTION: InfoSphere Information Server could allow an authenticated user to change installation files due to incorrect file permission settings. CVSS Base...

IBM Spectrum Protect Plus Denial of Service Vulnerability

IBM Spectrum Protect Plus is a suite of data protection platforms from IBM USA. The platform provides organizations with a single point of control and management and supports backup and recovery for virtual, physical and cloud environments of all sizes. A security vulnerability exists in IBM...

CVE-2021-20490

CVE-2021-20490 affects IBM Spectrum Protect Plus (versions 10.1.0–10.1.8). The root cause is insecure file permission settings due to not setting the sticky bit on certain directories, allowing a local user to cause a Denial of Service. Remediation is to apply the 10.1.8 patch (patch 1); after in...

Antivirus, Trojan, Spy ware scanner, Nested file manual scan bypass bug

Antivirus, Trojan, Spy ware scanner, Nested file manual scan bypass bug. Affected Product Only tested on...: Mcafee Virus Scan professional 8.0.0.12 Norton Antivirus 2003 Kaspersky 4.5x Ad-Aware 6.0.1.181 The Cleaner Risk Level: Medium Description: ------------ A malicious code can reside in a...