Skip to content
OpenAdvisories

Vendor

git-ecosystem

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.9

    Git Credential Manager (GCM)'s Debian package does not set root ownership on installed files

    Git Credential Manager (GCM) is a secure Git credential helper. Prior to 2.5.0, the Debian package does not set root ownership on installed files. This allows user 1001 on a multi-user system can replace binary and gain other users' privileges. This vulnerabi…