CVE-2018-16494CWE-377
In VOS and overly permissive "umask" may allow for authorized users of the server to gain unauthorized access through insecure file permissions that can result…
published May 26, 2021
What it is
In VOS and overly permissive "umask" may allow for authorized users of the server to gain unauthorized access through insecure file permissions that can result in an arbitrary read, write, or execution of newly created files and directories. Insecure umask setting was present throughout the Versa servers.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.01922 · 79.8th percentile
- Weakness
- CWE-377 · Insecure Temporary File
- Published
- 2021-05-26T18:46Z
EPSS history
Timeline