CVE-2019-11485CWE-412

apport created lock file in wrong directory

Low · published February 8, 2020

CVSS v3.1
3.3
EPSS
0%
Percentile
16.7
In the wild
Unconfirmed
What it is

Sander Bos discovered Apport's lock file was in a world-writable directory which allowed all users to prevent crash handling.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00260 · 16.7th percentile
Weakness
CWE-412 · Unrestricted Externally Accessible Lock
Published
2020-02-08T04:50Z
EPSS history
Timeline
  • 08 FEB 04:50Z
    apport created lock file in wrong directory
    cvelistv5