Lucene search
PRIOn knowledge basePRION:CVE-2020-7063HistoryFeb 27, 2020 - 9:15 p.m.
Design/Logic Flaw
2020-02-2721:15:00
PRIOn knowledge base
www.prio-n.com
4
In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData::buildFromIterator() function, the files are added with default permissions (0666, or all access) even if the original files on the filesystem were with more restrictive permissions. This may result in files having more lax permissions than intended when such archive is extracted.
References
lists.opensuse.org/opensuse-security-announce/2020-03/msg00023.html
bugs.php.net/bug.php?id=79082
lists.debian.org/debian-lts-announce/2020/03/msg00034.html
security.gentoo.org/glsa/202003-57
usn.ubuntu.com/4330-1/
www.debian.org/security/2020/dsa-4717
www.debian.org/security/2020/dsa-4719
www.tenable.com/security/tns-2021-14
Related
nvd
nvd
CVE-2020-7063
2020-02-27 21:15:19
veracode
veracode
Insecure File Permissions
2020-08-06 21:35:33
ubuntucve
ubuntucve
CVE-2020-7063
2020-02-27 00:00:00
alpinelinux
alpinelinux
CVE-2020-7063
2020-02-27 21:15:19
cvelist
cvelist
debiancve
debiancve
CVE-2020-7063
2020-02-27 21:15:19
redhatcve
redhatcve
CVE-2020-7063
2020-02-28 18:41:02
osv
osv
BIT-php-2020-7063
2024-03-06 11:07:12
php5 - security update
2020-03-26 00:00:00
php7.0 - security update
2020-07-05 00:00:00
cve
cve
CVE-2020-7063
2020-02-27 21:15:19
f5
f5
K31263502 : PHP vulnerability CVE-2020-7063
2020-03-03 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:0647-1)
2021-06-09 00:00:00
PHP < 7.2.28 Multiple Vulnerabilities (Feb 2020) - Linux
2020-02-21 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:0658-1)
2021-06-09 00:00:00
nessus
nessus
Debian DLA-2160-1 : php5 security update
2020-03-27 00:00:00
SUSE SLES12 Security Update : php5 (SUSE-SU-2020:0658-1)
2020-03-13 00:00:00
SUSE SLES12 Security Update : php72 (SUSE-SU-2020:0647-1)
2020-03-12 00:00:00
debian
debian
[SECURITY] [DLA 2160-1] php5 security update
2020-03-26 21:25:08
[SECURITY] [DSA 4717-1] php7.0 security update
2020-07-05 14:35:07
[SECURITY] [DSA 4717-1] php7.0 security update
2020-07-05 14:35:07
altlinux
altlinux
Security fix for the ALT Linux 8 package php7 version 7.2.28-alt1
2020-02-25 00:00:00
Security fix for the ALT Linux 10 package php8.1 version 7.3.15-alt1
2020-02-20 00:00:00
Security fix for the ALT Linux 9 package php7 version 7.3.15-alt1
2020-02-27 00:00:00
mageia
mageia
Updated php packages fix bugs and security vulnerabilities
2020-03-06 19:13:58
fedora
fedora
[SECURITY] Fedora 30 Update: php-7.3.15-1.fc30
2020-02-27 16:46:03
[SECURITY] Fedora 31 Update: php-7.3.15-1.fc31
2020-02-27 17:33:13
amazon
amazon
Medium: php72
2020-03-09 19:20:00
Medium: php73
2020-03-09 19:20:00
ibm
ibm
suse
suse
Security update for php7 (important)
2020-03-15 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2020-04-15 00:00:00
gentoo
gentoo
PHP: Multiple vulnerabilities
2020-03-26 00:00:00
redhat
redhat
almalinux
almalinux
Moderate: php:7.3 security, bug fix, and enhancement update
2020-09-08 08:38:31
rocky
rocky
php:7.3 security, bug fix, and enhancement update
2020-09-08 08:38:31
oraclelinux
oraclelinux
php:7.3 security, bug fix, and enhancement update
2020-09-09 00:00:00