CVE-2024-29962

{"id": "CVE-2024-29962", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "sirt@brocade.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "published": "2024-04-19T05:15:48.940", "references": [{"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/23248", "source": "sirt@brocade.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "sirt@brocade.com", "description": [{"lang": "en", "value": "CWE-276"}]}], "descriptions": [{"lang": "en", "value": "Brocade SANnav OVA before v2.3.1 and v2.3.0a have an insecure file permission setting that makes files world-readable. This could allow a local user without the required privileges to access sensitive information or a Java binary.\n\n"}, {"lang": "es", "value": "Brocade SANnav OVA anteriores a v2.3.1 y v2.3.0a tienen una configuraci\u00f3n de permisos de archivos inseguros que hace que los archivos sean legibles en todo el mundo. Esto podr\u00eda permitir que un usuario local sin los privilegios necesarios acceda a informaci\u00f3n confidencial o a un binario de Java."}], "lastModified": "2024-04-19T13:10:25.637", "sourceIdentifier": "sirt@brocade.com"}