What is CVE-2018-16494?

CVE-2018-16494 is a high-severity vulnerability in Versa-networks Versa_operating_system, classified under Insecure Temporary File. CVSS score: 8.8/10. Published 2021-05-26.

How severe is CVE-2018-16494?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Versa-networks Versa_operating_system

CVE-2018-16494

In VOS and overly permissive "umask" may allow for authorized users of the server to gain unauthorized access through insecure file permissions that can result in an arbitrary read, write, or execution of newly created files and directorie…

EPSS: 0.019 (77.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Versa-networks Versa_operating_system
N/a Versa Vos — versions Fixed Versions: 16.1R2S11, 20.2.2, 21.1.1, 21.2.1

Weakness classification (CWE)

References

support@hackerone.com (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2018-16494?: CVE-2018-16494 is a high-severity vulnerability in Versa-networks Versa_operating_system, classified under Insecure Temporary File. CVSS score: 8.8/10. Published 2021-05-26.
How severe is CVE-2018-16494?: High severity. CVSS v3 base score is 8.8 out of 10.