CVE-2021-31155

High

Failure to normalize the umask in please before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at…

mitre·CWE-732·Published 2021-05-27

CVSS

7.8

EPSS

0.00

KEV

Exploits

cve.orgen

157 chars

Failure to normalize the umask in please before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at least one command.

NVDen

157 chars

Failure to normalize the umask in please before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at least one command.

Failure to normalize the umask in pleaser before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at least one command.

GHSAen

160 chars

Failure to normalize the umask in pleaser before 0.4.0 allows a local attacker to gain full root privileges if they are allowed to execute at least one command.

NVDes

187 chars

Un fallo para normalizar umask en please versiones anteriores a 0.4, permite a un atacante local alcanzar privilegios de root completos si le tienen permitido ejecutar al menos un comando

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	7.2	3.9	10.0	AV:L/AC:L/Au:N/C:C/I:C/A:C
3.1	Primary	NVD	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
3.1	Secondary	GHSA	7.8	—	—	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H