Lucene search
Veracode Vulnerability DatabaseVERACODE:5919HistoryMar 15, 2018 - 4:48 a.m.
Insecure Permissions
2018-03-1504:48:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
21.4%
ajenti.plugin.plugins has insecure permissions when downloading plugins. An attacker can download and install any plugin to the server if they know how the request is made. There is no check to ensure that it is an admin downloading the plugin. Attackers could exploit this vulnerability to install malicious plugins.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ajenti.plugin.plugins | le | 0.47 |
Related
nvd
nvd
CVE-2018-1000080
2018-03-13 15:29:00
cve
cve
CVE-2018-1000080
2018-03-13 15:29:00
osv
osv
PYSEC-2018-109
2018-03-13 15:29:00
prion
prion
Authorization
2018-03-13 15:29:00
cvelist
cvelist
CVE-2018-1000080
2018-03-13 15:00:00