Beveiligingsadvies

CVE-2019-11481

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-02-08 04:50:21

Laatst bijgewerkt 2024-09-16 23:25:27

Toegewezen door canonical

CVSS-score 3.8

Status PUBLISHED

Beschrijving

Kevin Backhouse discovered that apport would read a user-supplied configuration file with elevated privileges. By replacing the file with a symbolic link, a user could get apport to read any file on the system as root, with unknown consequences.

← Alle CVE's bekijken Bekijk op cve.org ↗