CVE-2014-8327

The fal_sftp extension before 0.2.6 for TYPO3 uses weak permissions for sFTP driver files and folders, which allows remote authenticated users to obtain sensitive information via unspecified vectors.

Published Bycve@mitre.org

Published DateOct 27, 2014, 15:55

Affected Versions(2)

co-stack/fal_sftp(Packagist)

Introduced0

Fixed0.2.6

LimitN/A

vertexvaar/falsftp(Packagist)

Introduced0

Fixed0.2.6

LimitN/A

Package (Ecosystem)	Introduced	Fixed	Limit
co-stack/fal_sftp(Packagist)	0	0.2.6	N/A
vertexvaar/falsftp(Packagist)	0	0.2.6	N/A

Weakness Type (CWE):NVD-CWE-noinfo

CVSS Metrics

Base Score

Vector String

AV:N/AC:L/Au:S/C:P/I:N/A:N

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

PARTIAL

Integrity (I)

NONE

Availability (A)

NONE

References

Weakness Type (CWE):NVD-CWE-noinfo

CVSS Metrics

Base Score

Vector String

AV:N/AC:L/Au:S/C:P/I:N/A:N

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

PARTIAL

Integrity (I)

NONE

Availability (A)

NONE