CVE-2021-20001

CVE-2021-20001: vulnerability in debian-edu-config

Published · Updated

Follow this CVE+ Monitor debian-edu-config+ Monitor debian-edu-config

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.6%
It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares (~/public_html), which could result in privilege escalation.
Affected products
Debian · debian-edu-config