CVE-2022-43701CWE-276

Insecure directory permissions on installer files

High · published July 27, 2023

CVSS v3.1
7.8
EPSS
0%
Percentile
7.4
In the wild
Unconfirmed
What it is

When the installation directory does not have sufficiently restrictive file permissions, an attacker can modify files in the installation directory to cause execution of malicious code.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00182 · 7.4th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2023-07-27T21:28Z
EPSS history
Timeline
  • 27 JUL 21:28Z
    Insecure directory permissions on installer files
    cvelistv5