CVE-2018-16494
First published: Wed May 26 2021(Updated: )
In VOS and overly permissive "umask" may allow for authorized users of the server to gain unauthorized access through insecure file permissions that can result in an arbitrary read, write, or execution of newly created files and directories. Insecure umask setting was present throughout the Versa servers.
Credit: support@hackerone.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Versa Networks Versa Operating System | <16.1r2s11 | |
| Versa Networks Versa Operating System | >=20.2.0<20.2.2 | |
| Versa Networks Versa Operating System | >=21.1.0<21.1.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-16494?
CVE-2018-16494 has a medium severity rating due to its potential for unauthorized access through insecure file permissions.
How do I fix CVE-2018-16494?
To fix CVE-2018-16494, ensure that the umask settings are properly configured to restrict file permissions.
Who is affected by CVE-2018-16494?
CVE-2018-16494 affects users of the Versa Networks Versa Operating System versions up to 16.1r2s11 and between 20.2.0 to 20.2.2, and 21.1.0 to 21.1.1.
What kind of access can be gained through CVE-2018-16494?
Exploiting CVE-2018-16494 could allow unauthorized users to read, write, or execute newly created files and directories.
Is CVE-2018-16494 present in all versions of Versa Operating System?
No, CVE-2018-16494 is not present in all versions but specifically affects certain versions as mentioned in its details.
- agent/weakness
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/author
- agent/references
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/versa-networks
- canonical/versa networks versa operating system
- version/versa networks versa operating system/20.2.0
- version/versa networks versa operating system/21.1.0