1 result · Clear filters · Feed
-
Medium 6.5
Pebble service manager's file pull API allows access by any user
It was discovered that Canonical's Pebble service manager read-file API and the associated pebble pull command, before v1.10.2, allowed unprivileged local users to read files with root-equivalent permissions when Pebble was running as root. Fixes are also ava…