Lucene search
Veracode Vulnerability DatabaseVERACODE:26198HistoryAug 06, 2020 - 9:35 p.m.
Insecure File Permissions
2020-08-0621:35:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
19
php7
file permissions
phar archives
insecure
local user
EPSS
0.006
Percentile
78.7%
PHP7 uses insecure file permissions. When creating PHAR archives using the PharData::buildFromIterator() function, the files are added with default permissions (0666) even if the original files on the filesystem configured with more restrictive permissions, allowing any local user to access the files.
References
lists.opensuse.org/opensuse-security-announce/2020-03/msg00023.html
bugs.php.net/bug.php?id=79082
lists.debian.org/debian-lts-announce/2020/03/msg00034.html
security.gentoo.org/glsa/202003-57
usn.ubuntu.com/4330-1/
www.debian.org/security/2020/dsa-4717
www.debian.org/security/2020/dsa-4719
www.tenable.com/security/tns-2021-14
Related
nvd
nvd
CVE-2020-7063
2020-02-27 21:15:19
prion
prion
Design/Logic Flaw
2020-02-27 21:15:00
ubuntucve
ubuntucve
CVE-2020-7063
2020-02-27 00:00:00
debiancve
debiancve
CVE-2020-7063
2020-02-27 21:15:19
f5
f5
K31263502 : PHP vulnerability CVE-2020-7063
2020-03-03 00:00:00
osv
osv
BIT-php-2020-7063
2024-03-06 11:07:12
php5 - security update
2020-03-26 00:00:00
php7.0 - security update
2020-07-05 00:00:00
redhatcve
redhatcve
CVE-2020-7063
2020-02-28 18:41:02
cve
cve
CVE-2020-7063
2020-02-27 21:15:19
alpinelinux
alpinelinux
CVE-2020-7063
2020-02-27 21:15:19
cvelist
cvelist
openvas
openvas
PHP < 7.2.28 Multiple Vulnerabilities (Feb 2020) - Windows
2020-02-21 00:00:00
Debian: Security Advisory (DLA-2160-1)
2020-03-27 00:00:00
PHP < 7.2.28 Multiple Vulnerabilities (Feb 2020) - Linux
2020-02-21 00:00:00
nessus
nessus
SUSE SLES12 Security Update : php5 (SUSE-SU-2020:0658-1)
2020-03-13 00:00:00
SUSE SLES12 Security Update : php72 (SUSE-SU-2020:0647-1)
2020-03-12 00:00:00
Debian DLA-2160-1 : php5 security update
2020-03-27 00:00:00
debian
debian
[SECURITY] [DLA 2160-1] php5 security update
2020-03-26 21:25:08
[SECURITY] [DSA 4717-1] php7.0 security update
2020-07-05 14:35:07
[SECURITY] [DSA 4717-1] php7.0 security update
2020-07-05 14:35:07
altlinux
altlinux
Security fix for the ALT Linux 8 package php7 version 7.2.28-alt1
2020-02-25 00:00:00
Security fix for the ALT Linux 10 package php8.0 version 7.3.15-alt1
2020-02-20 00:00:00
Security fix for the ALT Linux 10 package php8.1 version 7.3.15-alt1
2020-02-20 00:00:00
fedora
fedora
[SECURITY] Fedora 30 Update: php-7.3.15-1.fc30
2020-02-27 16:46:03
[SECURITY] Fedora 31 Update: php-7.3.15-1.fc31
2020-02-27 17:33:13
ibm
ibm
amazon
amazon
Medium: php72
2020-03-09 19:20:00
Medium: php73
2020-03-09 19:20:00
mageia
mageia
Updated php packages fix bugs and security vulnerabilities
2020-03-06 19:13:58
suse
suse
Security update for php7 (important)
2020-03-15 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2020-04-15 00:00:00
gentoo
gentoo
PHP: Multiple vulnerabilities
2020-03-26 00:00:00
redhat
redhat
oraclelinux
oraclelinux
php:7.3 security, bug fix, and enhancement update
2020-09-09 00:00:00
almalinux
almalinux
Moderate: php:7.3 security, bug fix, and enhancement update
2020-09-08 08:38:31
rocky
rocky
php:7.3 security, bug fix, and enhancement update
2020-09-08 08:38:31