Skip to main content

Mod Auth Openid

1 CVEs product

Monthly

CVE-2012-2760 LOW POC Monitor

mod_auth_openid before 0.7 for Apache uses world-readable permissions for /tmp/mod_auth_openid.db, which allows local users to obtain session ids. Rated low severity (CVSS 2.1), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Privilege Escalation Apache Mod Auth Openid
NVD Exploit-DB GitHub
CVSS 2.0
2.1
EPSS
0.4%
EPSS 0% CVSS 2.1
LOW POC Monitor

mod_auth_openid before 0.7 for Apache uses world-readable permissions for /tmp/mod_auth_openid.db, which allows local users to obtain session ids. Rated low severity (CVSS 2.1), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Privilege Escalation Apache Mod Auth Openid
NVD Exploit-DB GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy