Beveiligingsadvies

CVE-2026-45407

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-26 16:21:25

Laatst bijgewerkt 2026-06-26 18:06:03

Toegewezen door GitHub_M

CVSS-score 5.0

Status PUBLISHED

Beschrijving

Dokku is a docker-powered PaaS. Prior to 0.38.2, the git:auth command creates $DOKKU_ROOT/.netrc using bash's touch command, which applies the default umask of 0644. This pre-creation defeats the netrc binary's built-in 0600 permission setting, leaving git credentials readable by any local user who can traverse the dokku home directory. This vulnerability is fixed in 0.38.2.

← Alle CVE's bekijken Bekijk op cve.org ↗