Ifax Hylafax Enterprise
2 CVEs affecting Ifax Hylafax Enterprise. Latest disclosed: 2020-06-30. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-15397 | High | 7.8 | 2020-06-30 | HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g., locations under /var/sp… |
CVE-2020-15396 | High | 7.8 | 2020-06-30 | In HylaFAX+ through 7.0.2 and HylaFAX Enterprise, the faxsetup utility calls chown on files in user-owned directories. By winning a race, a local attacker coul… |