CVE-2024-6122CWE-276

Incorrect Default Directory Permissions for NI SystemLink Redis Service

Medium · published July 22, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
14.2
In the wild
Unconfirmed
What it is

An incorrect permission in the installation directory for the shared NI SystemLink Server KeyValueDatabase service may result in information disclosure via local access. This affects NI SystemLink Server 2024 Q1 and prior versions. It also affects NI FlexLogger 2023 Q2 and prior versions which installed this shared service.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00239 · 14.2th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2024-07-22T19:27Z
EPSS history
Timeline
  • 22 JUL 19:27Z
    Incorrect Default Directory Permissions for NI SystemLink Redis Service
    cvelistv5