ID | CVE-2022-32207 | ||||||
Sažetak | When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended. | ||||||
Reference |
|
||||||
CVSS |
|
||||||
Pristup |
|
||||||
Impact |
|
||||||
CVSS vektor | AV:N/AC:L/Au:N/C:P/I:P/A:P | ||||||
Zadnje važnije ažuriranje | 27-03-2024 - 15:00 | ||||||
Objavljeno | 07-07-2022 - 13:15 |