Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2023-50974
HistoryJan 09, 2024 - 12:00 a.m.

CVE-2023-50974

2024-01-0900:00:00
mitre
github.com
1
appwrite
cli
login
credentials
storage
unix permissions

AI Score

6.5

Confidence

Low

SSVC

Exploitation

poc

Automatable

no

Technical Impact

partial

In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a ~/.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system can access those credentials.

AI Score

6.5

Confidence

Low

SSVC

Exploitation

poc

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2023-50974