Lucene search
Veracode Vulnerability DatabaseVERACODE:21529HistorySep 17, 2019 - 2:52 a.m.
Information Disclosure
2019-09-1702:52:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.0004 Low
EPSS
Percentile
5.1%
github.com/astaxie/beego is vulnerable to information disclosure. Local users are able to access and read session files due to excessive permissions 0777 configured on the files upon creation.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/astaxie/beego | eq | HEAD | |
| github.com/astaxie/beego | le | 1.12.1 |
References
Related
gitlab
gitlab
Incorrect Default Permissions
2019-09-16 00:00:00
cve
cve
CVE-2019-16355
2019-09-16 15:15:10
cvelist
cvelist
CVE-2019-16355
2019-09-16 14:12:22
github
github
Incorrect Default Permissions in Beego
2022-05-24 22:00:36
prion
prion
Session fixation
2019-09-16 15:15:00
nvd
nvd
CVE-2019-16355
2019-09-16 15:15:10
osv
osv
Beego has a file creation race condition
2021-08-02 17:15:05
Incorrect permissions for critical resource in github.com/astaxie/beego
2021-04-14 20:04:52
CVE-2019-16354
2019-09-16 15:15:10