Non évaluée

WTF before 0.19.0 does not set the permissions of config.yml, which might make it easier for local attackers to read passwords or API keys if the perm...

CVE-2019-15716 Première détection SecPulse Aug 29, 2019

Description d'origine La description telle que publiée par la source (souvent en anglais).

WTF before 0.19.0 does not set the permissions of config.yml, which might make it easier for local attackers to read passwords or API keys if the permissions were misconfigured or were based on unsafe OS defaults.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
patch github.com
report github.com

Faits clés

Gravité: Non évaluée
Publication: Aug 29, 2019
Première détection SecPulse: Aug 29, 2019

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:52