Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2014-6275

FusionForge before 5.3.2 use scripts that run under the shared Apache user, which is also used by project homepages by default. If project webpages are hosted on the same server th

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
debian

Description

FusionForge before 5.3.2 use scripts that run under the shared Apache user, which is also used by project homepages by default. If project webpages are hosted on the same server than FusionForge, it can allow users to incorrectly access on-disk private data in FusionForge.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat FusionForge

  • before 5.3.2affected

References