Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:28361
HistoryDec 06, 2020 - 4:11 a.m.

Insecure Permissions

2020-12-0604:11:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
sympa
file permissions
debian
security configuration
software

EPSS

0.001

Percentile

38.0%

sympa does not securely configure file permissions. debian/sympa.postinst uses mode 4755 for sympa_newaliases-wrapper while the intended permissions are mode 4750 (for access by the sympa group).

EPSS

0.001

Percentile

38.0%