CVE-2019-7306

Katalog CVE

CVSS 7.5 · High EPSS 1,8%

Kerentanan Files or Directories Accessible to External Parties pada byobu, canonical ubuntu linux. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Byobu Apport hook may disclose sensitive information since it automatically uploads the local user's .screenrc which may contain private hostnames, usernames and passwords. This issue affects: byobu

Rincian

Terbit di NVD

17 April 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-552: Files or Directories Accessible to External Parties

EPSS (30 hari)

1,8% peluang dieksploitasi; lebih tinggi dari 77,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugs.launchpad.net/ubuntu/+source/byobu/+bug/1827202 exploit · advisory pihak ketiga
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7306 advisory pihak ketiga