CVE-2019-18192

published 2019-10-17

CVE-2019-18192: GNU Guix 1.0.1 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable…

high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

GNU Guix 1.0.1 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable, a similar issue to CVE-2019-17365.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
debian	guix	—	—
gnu	guix	—	—

CWE-732