{"id":"CVE-2018-16494","state":"PUBLISHED","title":"In VOS and overly permissive \"umask\" may allow for authorized users of the server to gain unauthorized access through insecure file permissions that can result in an arbitrary read","description":"In VOS and overly permissive \"umask\" may allow for authorized users of the server to gain unauthorized access through insecure file permissions that can result in an arbitrary read, write, or execution of newly created files and directories. Insecure umask setting was present throughout the Versa servers.","publishedAt":"2021-05-26T18:46:13.000Z","updatedAt":"2024-08-05T10:24:32.662Z","severity":null,"assigner":"hackerone","products":["n/a Versa VOS"],"affected":[{"vendor":"n/a","product":"Versa VOS","versions":[{"version":"Fixed Versions: 16.1R2S11, 20.2.2, 21.1.1, 21.2.1","status":"affected"}]}],"references":["https://hackerone.com/reports/1168191"],"weaknesses":["CWE-377"],"ingestedAt":"2026-10-29T19:44:25.237Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2018/16xxx/CVE-2018-16494.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2018-16494","state":"PUBLISHED","datePublished":"2021-05-26T18:46:13.000Z","dateUpdated":"2024-08-05T10:24:32.662Z","assignerShortName":"hackerone","assignerOrgId":"36234546-b8fa-4601-9d6f-f4e334aa8ea1","dateReserved":"2018-09-04T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"In VOS and overly permissive \"umask\" may allow for authorized users of the server to gain unauthorized access through insecure file permissions that can result in an arbitrary read, write, or execution of newly created files and directories. Insecure umask setting was present throughout the Versa servers."}],"affected":[{"vendor":"n/a","product":"Versa VOS","versions":[{"version":"Fixed Versions: 16.1R2S11, 20.2.2, 21.1.1, 21.2.1","status":"affected"}]}],"references":[{"url":"https://hackerone.com/reports/1168191","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-377","description":"Insecure Temporary File (CWE-377)","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"hackerone","dateUpdated":"2021-05-26T18:46:13.000Z","orgId":"36234546-b8fa-4601-9d6f-f4e334aa8ea1"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"support@hackerone.com","ID":"CVE-2018-16494","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Versa VOS","version":{"version_data":[{"version_value":"Fixed Versions: 16.1R2S11, 20.2.2, 21.1.1, 21.2.1"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"In VOS and overly permissive \"umask\" may allow for authorized users of the server to gain unauthorized access through insecure file permissions that can result in an arbitrary read, write, or execution of newly created files and directories. Insecure umask setting was present throughout the Versa servers."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Insecure Temporary File (CWE-377)"}]}]},"references":{"reference_data":[{"name":"https://hackerone.com/reports/1168191","refsource":"MISC","url":"https://hackerone.com/reports/1168191"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://hackerone.com/reports/1168191","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T10:24:32.662Z"}}]}}}