CVE-2020-12850: Improper Privilege Management

The following vulnerability applies only to the Pydio Cells Enterprise OVF version 2.0.4. Prior versions of the Pydio Cells Enterprise OVF such as version 2.0.3 have a looser policy restriction allowing the “pydio” user to execute any privileged command using sudo. In version 2.0.4 of the...

PT-2020-13297

Name of the Vulnerable Software and Affected Versions Pydio Cells version 2.0.4 Description The update feature in Pydio Cells allows an administrator user to set a custom update URL and the public RSA key used to validate the downloaded update package. The update process involves downloading the...