Incorrect Permission Assignment for Critical Resource Affecting froxlor/froxlor package, versions <2.2.0
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-PHP-FROXLORFROXLOR-7830474
- published25 Aug 2024
- disclosed23 Aug 2024
- credithardfalcon
Introduced: 23 Aug 2024
CVE NOT AVAILABLE CWE-732 (opens in a new tab)Common Weakness Enumeration (CWE) is a category system for software weaknesses
How to fix?
Upgrade froxlor/froxlor to version 2.2.0 or higher.
Overview
froxlor/froxlor is a server administration software.
Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource on configuration files. An attacker can gain unauthorized access to sensitive information by exploiting the readable configuration file containing database credentials.
NOTE: This is only exploitable if the instance is configured to use pure-ftpd.