CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
AI Score
Confidence
High
EPSS
Percentile
5.1%
The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils before 90 does not properly ensure that the passphrase file is created, which might allow local users to bypass intended access restrictions at a certain time in the new-user creation steps.
Vendor | Product | Version | CPE |
---|---|---|---|
ecryptfs | ecryptfs-utils | 67 | cpe:/a:ecryptfs:ecryptfs-utils:67::: |
ecryptfs | ecryptfs-utils | 80 | cpe:/a:ecryptfs:ecryptfs-utils:80::: |
ecryptfs | ecryptfs-utils | 85 | cpe:/a:ecryptfs:ecryptfs-utils:85::: |
ecryptfs | ecryptfs_utils | 58 | cpe:/a:ecryptfs:ecryptfs_utils:58::: |
ecryptfs | ecryptfs-utils | 83 | cpe:/a:ecryptfs:ecryptfs-utils:83::: |
ecryptfs | ecryptfs-utils | 84 | cpe:/a:ecryptfs:ecryptfs-utils:84::: |
ecryptfs | ecryptfs-utils | 62 | cpe:/a:ecryptfs:ecryptfs-utils:62::: |
ecryptfs | ecryptfs-utils | 63 | cpe:/a:ecryptfs:ecryptfs-utils:63::: |
ecryptfs | ecryptfs-utils | 87 | cpe:/a:ecryptfs:ecryptfs-utils:87::: |
ecryptfs | ecryptfs-utils | 71 | cpe:/a:ecryptfs:ecryptfs-utils:71::: |