CVE-2018-16494: High severity versa networks versa operating system vulnerability
In VOS and overly permissive "umask" may allow for authorized users of the server to gain unauthorized access through insecure file permissions that can result in an arbitrary read, write, or execution of newly created files and directories. Insecure umask setting was present throughout the Versa servers.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-16494?
CVE-2018-16494 has a medium severity rating due to its potential for unauthorized access through insecure file permissions.
How do I fix CVE-2018-16494?
To fix CVE-2018-16494, ensure that the umask settings are properly configured to restrict file permissions.
Who is affected by CVE-2018-16494?
CVE-2018-16494 affects users of the Versa Networks Versa Operating System versions up to 16.1r2s11 and between 20.2.0 to 20.2.2, and 21.1.0 to 21.1.1.
What kind of access can be gained through CVE-2018-16494?
Exploiting CVE-2018-16494 could allow unauthorized users to read, write, or execute newly created files and directories.
Is CVE-2018-16494 present in all versions of Versa Operating System?
No, CVE-2018-16494 is not present in all versions but specifically affects certain versions as mentioned in its details.