CVE-2013-6412
augeas: incorrect permissions set on newly created files
Loading…
Severity
ModerateRed Hat Product Security
CVSS 2.0
Review impact separately from score.
Published · November 25, 2013
Updated · June 27, 2026
Description
The transform_save function in transform.c in Augeas 1.0.0 through 1.1.0 does not properly calculate the permission values when the umask contains a "7," which causes world-writable permissions to be used for new files and allows local users to modify the files via unspecified vectors.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 2.0 · 2.6AV:L/AC:H/Au:N/C:P/I:P/A:N
CWE not specified