Incorrect Default Permissions in Beego
The File Session Manager in Beego before 1.12.2 allows local users to read session files because of weak permissions for individual files.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-16355US | medium5.5OT elevated | — | ||
The File Session Manager in Beego 1.10.0 allows local users to read session files because of weak permissions for individual files. | ||||
| CVE-2019-16354US | medium4.7OT elevated | — | ||
The File Session Manager in Beego 1.10.0 allows local users to read session files because there is a race condition involving file creation within a directory with weak permissions… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/beego/beego/commit/bac2b31afecc65d9a89f9e473b8006c5edc0c8d1WEB
- https://github.com/beego/beego/issues/3763WEB
- https://github.com/beego/beego/pull/3975WEB
- https://github.com/beego/beego/pull/3975/commits/f99cbe0fa40936f2f8dd28e70620c559b6e5e2fdWEB
- https://nvd.nist.gov/vuln/detail/CVE-2019-16355ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan