scientificlinux Luci 0.26.0

CPE Details

scientificlinux Luci 0.26.0
scientificlinux
luci
0.26.0
2013-11-25
14h37 +00:00
2013-11-25
14h42 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:scientificlinux:luci:0.26.0:*:*:*:*:*:*:*

Informations

Vendor

scientificlinux

Product

luci

Version

0.26.0

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2014-3593 2014-10-15 12h00 +00:00 Eval injection vulnerability in luci 0.26.0 allows remote authenticated users with certain permissions to execute arbitrary Python code via a crafted cluster configuration.
6
CVE-2013-4481 2013-11-23 10h00 +00:00 Race condition in Luci 0.26.0 creates /var/lib/luci/etc/luci.ini with world-readable permissions before restricting the permissions, which allows local users to read the file and obtain sensitive information such as "authentication secrets."
1.9
CVE-2013-4482 2013-11-23 10h00 +00:00 Untrusted search path vulnerability in python-paste-script (aka paster) in Luci 0.26.0, when started using the initscript, allows local users to gain privileges via a Trojan horse .egg-info file in the (1) current working directory or (2) its parent directories.
6.2
The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.