CoreCVE
Back

HIGH

The Security Manager in razorCMS before 0.4 does not verify the permissions of every file owned by the apache user account, which is inconsistent with the documentation and allows local users to have an unspecified impact

Published Apr 28, 2009

Description

The Security Manager in razorCMS before 0.4 does not verify the permissions of every file owned by the apache user account, which is inconsistent with the documentation and allows local users to have an unspecified impact.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (6)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Apr 28, 2009
Updated Aug 7, 2024
Reserved Apr 28, 2009
Link CVE-2009-1462
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 16, 2026
Link CVE-2009-1462
Red Hat
Severity n/a
Public date n/a
Links CVE-2009-1462
ENISA EUVD
Assigner mitre
Published Apr 28, 2009
Updated Aug 7, 2024
Exploited since n/a
Link EUVD-2009-1460
EUVD-2009-1460