4
CVE-2025-32803
- EPSS 0.06%
- Veröffentlicht 28.05.2025 17:08:20
- Zuletzt bearbeitet 15.04.2026 00:35:42
- Quelle security-officer@isc.org
- CVE-Watchlists
- Unerledigt
Insecure file permissions can result in confidential information leakage
In some cases, Kea log files or lease files may be world-readable. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerISC
≫
Produkt
Kea
Default Statusunaffected
Version <=
2.4.1
Version
2.4.0
Status
affected
Version <=
2.6.2
Version
2.6.0
Status
affected
Version <=
2.7.8
Version
2.7.0
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.06% | 0.172 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| security-officer@isc.org | 4 | 2.5 | 1.4 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
CWE-276 Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.