Lucene search
Veracode Vulnerability DatabaseVERACODE:45642HistoryFeb 27, 2024 - 6:13 a.m.
Insecure File Permissions
2024-02-2706:13:22
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
rack-cors
vulnerability
file permissions
unauthorized disclosure
modification
software
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
AI Score
6.5
Confidence
Low
rack-cors is vulnerable to Insecure File Permissions. The vulnerability is due to the distribution of files with world-writable permissions. This can potentially lead to unauthorized disclosure or modification.
Related
ubuntucve
ubuntucve
CVE-2024-27456
2024-02-26 00:00:00
github
github
Rack CORS Middleware has Insecure File Permissions
2024-02-26 18:30:31
prion
prion
Design/Logic Flaw
2024-02-26 16:28:00
rubygems
rubygems
Rack CORS Middleware has Insecure File Permissions
2024-02-25 21:00:00
nvd
nvd
CVE-2024-27456
2024-02-26 16:28:00
cvelist
cvelist
CVE-2024-27456
2024-02-26 00:00:00
debiancve
debiancve
CVE-2024-27456
2024-02-26 16:28:00
redhatcve
redhatcve
CVE-2024-27456
2024-02-26 21:03:40
osv
osv
Rack CORS Middleware has Insecure File Permissions
2024-02-26 18:30:31
cve
cve
CVE-2024-27456
2024-02-26 16:28:00
vulnrichment
vulnrichment
CVE-2024-27456
2024-02-26 00:00:00
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
AI Score
6.5
Confidence
Low
Related for VERACODE:45642