CVE-2021-36781CWE-276

parsec: dangerous 777 permissions for /run/parsec

Medium · published January 14, 2022

CVSS v3.1
5.9
EPSS
0%
Percentile
10.3
In the wild
Unconfirmed
What it is

A Incorrect Default Permissions vulnerability in the parsec package of openSUSE Factory allows local attackers to imitate the service leading to DoS or clients talking to an imposter service. This issue affects: openSUSE Factory parsec versions prior to 0.8.1-1.1.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00207 · 10.3th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2022-01-14T10:40Z
EPSS history
Timeline
  • 14 JAN 10:40Z
    parsec: dangerous 777 permissions for /run/parsec
    cvelistv5