Vulnerability in Secunia Csi Agent

CVE-2013-5364

Secunia CSI Agent 6.0.0.15017 and earlier, 6.0.1.1007 and earlier, and 7.0.0.21 and earlier, when running on Red Hat Linux, uses world-readable and world-writable permissions for /etc/csia_config.xml, which allows local users to change CSI Agent configuration by modifying this file.

EPSS: 0.004 (33.9th percentile) — read the EPSS interpretation.

Affected products

Secunia Csi_agent
Redhat Enterprise_linux
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

PSIRT-CNA@flexerasoftware.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
PSIRT-CNA@flexerasoftware.com (x_refsource_CONFIRM, Third Party Advisory)
PSIRT-CNA@flexerasoftware.com (x_refsource_OSVDB, vdb-entry, Broken Link)
PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
PSIRT-CNA@flexerasoftware.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)