CVE-2020-14976

GNS3 ubridge through 0.9.18 on macOS, as used in GNS3 server before 2.1.17, allows a local attacker to read arbitrary files because it handles…

published June 23, 2020

CVSS
—
EPSS
0%
Percentile
40.6
In the wild
Unconfirmed
What it is

GNS3 ubridge through 0.9.18 on macOS, as used in GNS3 server before 2.1.17, allows a local attacker to read arbitrary files because it handles configuration-file errors by printing the configuration file while executing in a setuid root context.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00483 · 40.6th percentile
Published
2020-06-23T19:04Z
EPSS history
Timeline
  • 23 JUN 19:04Z
    GNS3 ubridge through 0.9.18 on macOS, as used in GNS3 server before 2.1.17, allows a local attacker to read arbitrary files because it handles…
    cvelistv5