5.5
CVE-2021-44216
- EPSS 0.06%
- Veröffentlicht 10.03.2022 17:44:14
- Zuletzt bearbeitet 21.11.2024 06:30:36
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginNorthern.tech CFEngine Enterprise before 3.15.5 and 3.18.x before 3.18.1 has Insecure Permissions that may allow unauthorized local users to access the Apache and Mission Portal log files.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Northern.Tech ≫ Cfengine SwEditionenterprise Version < 3.15.5
Northern.Tech ≫ Cfengine SwEditionenterprise Version >= 3.18.0 < 3.18.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.06% | 0.193 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 2.1 | 3.9 | 2.9 |
AV:L/AC:L/Au:N/C:P/I:N/A:N
|
CWE-276 Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.