← Voltar para CVEs
CVE-2019-16355
MEDIUM5.5
Descricao
The File Session Manager in Beego 1.10.0 allows local users to read session files because of weak permissions for individual files.
Detalhes CVE
Pontuacao CVSS v3.15.5
SeveridadeMEDIUM
Vetor CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Vetor de ataqueLOCAL
ComplexidadeLOW
Privilegios necessariosLOW
Interacao do usuarioNONE
Publicado9/16/2019
Ultima modificacao11/21/2024
Fontenvd
Avistamentos honeypot0
Produtos afetados
beego:beego
Fraquezas (CWE)
CWE-276
Referencias
https://github.com/astaxie/beego/issues/3763(cve@mitre.org)
https://github.com/astaxie/beego/issues/3763(af854a3a-2127-422b-91ae-364da2661108)
Correlacoes IOC
Sem correlacoes registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.