CVE-2021-20001

2022-02-1119:50:09

debian

www.cve.org

debian-edu-config

insecure permissions

web shares

privilege escalation

AI Score

9.7

Confidence

High

EPSS

0.002

Percentile

58.5%

JSON

It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares (~/public_html), which could result in privilege escalation.

CNA Affected

[
  {
    "product": "debian-edu-config",
    "vendor": "Debian",
    "versions": [
      {
        "status": "affected",
        "version": "< 2.12.16"
      }
    ]
  }
]