Northern.tech CFEngine Enterprise before 3.15.5 and 3.18.x before 3.18.1 has Insecure Permissions that may allow unauthorized local users to access the Apache and Mission Portal log files.
References
Link | Resource |
---|---|
https://northern.tech | Vendor Advisory |
https://cfengine.com/blog/2022/cve-2021-44215-and-cve-2021-44216/ | Exploit Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2022-03-10 09:44
Updated : 2022-03-15 08:29
NVD link : CVE-2021-44216
Mitre link : CVE-2021-44216
JSON object : View
CWE
CWE-276
Incorrect Default Permissions
Products Affected
northern.tech
- cfengine