Log files were created with permission settings that were too broad, that allowed them to be read or altered by another user on the same server. The risk of an internal information leak was low. Part of patch SUPEE-6285 Weiterlesen: [APPSEC-802] Permissions on log files too broad
Intelligence View
⚡ tsecurity.de Intelligence
[APPSEC-802] Permissions on log files too broad
Log files were created with permission settings that were too broad, that allowed them to be read or altered by another user on the same server. The risk of an…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
13 sources
CVE-2026-115207 | GNU patch Patch Application path traversal (EUVD-2026-108112)
12 more sources
VVulDB Updates3 hours agoCVE-2026-112820 | Elated-mes Academist Core Plugin up to 1.4.1 on WordPress file inclusion (EUVD-2026-108110) VVulDB Updates3 hours agoCVE-2026-113681 | AcademySoftwareFoundation OpenImageIO prior 3.0.20.0/3.1.15.0/3.2.0.3-beta1 Cineon File cineon::Codec::Read integer overflow (EUVD-2026-105097) VVulDB Updates2 hours agoCVE-2026-112085 | OpenJS webpack-dev-server up to 5.2.6/6.0.x WebSocket Upgrade cross-domain policy (EUVD-2026-108108) VVulDB Updates2 hours agoCVE-2026-114348 | webpack webpack-dev-server up to 5.2.6/6.0.x Open-Editor Endpoint Host incorrect regex (EUVD-2026-108109) VVulDB Updates1 hour agoCVE-2026-103234 | Ultimate Review Plugin up to 2.4.4 on WordPress Shortcode code injection (EUVD-2026-108009) VVulDB Updates1 hour agoCVE-2026-84284 | GitLab up to 19.2.7/19.3.x/19.4.1 improper authorization (EUVD-2026-98218)
+6
11 sources
CVE-2026-96361 | Drupal Webform up to 6.2.12/6.3.1 cross site scripting (WID-SEC-2026-3554)
10 more sources
VVulDB Updates3 hours agoCVE-2026-96362 | Drupal Webform up to 6.2.11/6.3.0 cross site scripting (WID-SEC-2026-3554) VVulDB Updates3 hours agoCVE-2026-96364 | Drupal Webform up to 6.2.11/6.3.0 allocation of resources (WID-SEC-2026-3554) VVulDB Updates3 hours agoCVE-2026-96363 | Drupal Webform Plugin up to 6.2.11/6.3.0 cross site scripting (WID-SEC-2026-3554) VVulDB Updates3 hours agoCVE-2026-96366 | Drupal Webform Plugin up to 6.2.11/6.3.0 improper authorization (WID-SEC-2026-3554) VVulDB Updates3 hours agoCVE-2026-96365 | Drupal Webform up to 6.2.11/6.3.0 allocation of resources (WID-SEC-2026-3554) VVulDB Updates3 hours agoCVE-2026-96367 | Drupal Webform Plugin up to 6.2.11/6.3.0 cross site scripting (WID-SEC-2026-3554)
+4
9 sources
Challenges of Matrix within Europe's most sovereign, most secure and largest IT Infrastructure
8 more sources
MMatrixdotorg3 hours agoMatrixdotorg: TI-Messenger goes Europe: Austrian healthcare adopts matrix protocol MMatrixdotorg3 hours agoMatrixdotorg: MSG GOV: Building Brazil's Sovereign Government Messaging Platform on Matrix MMatrixdotorg3 hours agoMatrixdotorg: Challenges of Matrix within Europe's most sovereign, most secure and largest IT Infrastructure MMatrixdotorg3 hours agoMatrixdotorg: TI-Messenger goes Europe: Austrian healthcare adopts matrix protocol MMatrixdotorg3 hours agoMatrixdotorg: MSG GOV: Building Brazil's Sovereign Government Messaging Platform on Matrix CChaos Computer Club16 hours agoMSG GOV: Building Brazil's Sovereign Government Messaging Platform on Matrix (matrix-conf-2026)
+2
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4277601/vulnerabilities-cve/appsec-802-permissions-on-log-files-too-broad/