Vendor/product archive

scientificlinux / luci CVEs

Beta · best-effort

3 CVEs tagged to scientificlinux / luci — 0 Critical, 0 High, 2 Medium, 1 Low, 0 Unrated.

See this archive with more filters Back to scientificlinux vendor archive

CVE-2014-3593

Published Oct 15, 2014

Eval injection vulnerability in luci 0.26.0 allows remote authenticated users with certain permissions to execute arbitrary Python code via a crafted cluster configuration.

CVSS 6.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2013-4482

Published Nov 23, 2013

Untrusted search path vulnerability in python-paste-script (aka paster) in Luci 0.26.0, when started using the initscript, allows local users to gain privileges via a Trojan horse…

CVSS 6.2 · Medium

Vendor/product tagsBeta · best-effort

CVE-2013-4481

Published Nov 23, 2013

Race condition in Luci 0.26.0 creates /var/lib/luci/etc/luci.ini with world-readable permissions before restricting the permissions, which allows local users to read the file and…

CVSS 1.9 · Low

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1