Security Advisory
CVE-2019-17365
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Nix through 2.3 allows local users to gain access to an arbitrary users account because the parent directory of the user-profile directories is world writable.