CVE-2013-1425 - ldap-git-backup before 1.0.4 exposes password hashes due to incorrect directory permissions

MEDIUM

ldap-git-backup before 1.0.4 exposes password hashes due to incorrect directory permissions

Published Nov 7, 2019

5.5

MEDIUM

CVSS 3.1

EPSS 0.34%

ldap-git-backup before 1.0.4 exposes password hashes due to incorrect directory permissions.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
1.0.7-1	affected	-

No remediation recorded yet.

Weaknesses (1)

CWE-276

Incorrect Default Permissions

Link	Providers	Tags
https://github.com/elmar/ldap-git-backup/commit/a90f3217fce87962db82d212f73af70693087124		x_refsource_CONFIRMPatchThird Party Advisory
https://security-tracker.debian.org/tracker/CVE-2013-1425		x_refsource_MISCThird Party Advisory
https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1096253.html		x_refsource_MISC