Umask
1 CVEs
product
Monthly
Failure to normalize the umask in please before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at least one command. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.
Information Disclosure
Umask
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2021-31155
Cargo
EPSS 0%
CVSS 7.8
HIGH
POC
PATCH
This Week
Failure to normalize the umask in please before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at least one command. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.
Information Disclosure
Umask
NVD