Beveiligingsadvies

CVE-2019-11502

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-04-24 20:02:32
Laatst bijgewerkt 2024-08-04 22:55:40
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

snap-confine in snapd before 2.38 incorrectly set the ownership of a snap application to the uid and gid of the first calling user. Consequently, that user had unintended access to a private /tmp directory.