CVE-2021-31155

CVE-2021-31155

EPSS 0.4%

Failure to normalize the umask in please before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at least one command.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://gitlab.com/edneville/please/-/tree/master/src/bin https://www.openwall.com/lists/oss-security/2021/05/18/1