← Back

CVE-2013-5364

nvd nist
Published: Jan 26, 2014Modified: Apr 29, 2026

JSON object

Loading...
3.6
Vector
AV:L/AC:L/Au:N/C:P/I:P/A:N
Exploitability: 3.9 / Impact: 4.9
Source: NVD

Description

Secunia CSI Agent 6.0.0.15017 and earlier, 6.0.1.1007 and earlier, and 7.0.0.21 and earlier, when running on Red Hat Linux, uses world-readable and world-writable permissions for /etc/csia_config.xml, which allows local users to change CSI Agent configuration by modifying this file.

Affected (3)

Products: Secunia: Csi Agent
Secunia
1 product
Csi Agent
Configuration A
3 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Secunia
Csi Agent
6.0.0 ≤ version ≤ 6.0.0.15017
Csi Agent
6.0.1 ≤ version ≤ 6.0.1.1007
Csi Agent
7.0.0 ≤ version ≤ 7.0.0.21
Running on/withPlatform Versions
Redhat
Enterprise Linux
All versions

Related CWEs

CWE-264
CWE-264

References (10)

Source: PSIRT-CNA@flexerasoftware.com
Broken Link
Source: PSIRT-CNA@flexerasoftware.com
Third Party Advisory
Source: PSIRT-CNA@flexerasoftware.com
Third Party Advisory
Source: PSIRT-CNA@flexerasoftware.com
Third Party AdvisoryVDB Entry
Source: PSIRT-CNA@flexerasoftware.com
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry

Timeline

No history available yet.