Unscored CVE-2009-1462 EUVD-2009-1460GHSA-466g-m7c7-p5x4

The Security Manager in razorCMS before 0.4 does not verify the permissions of every file owned by the apache user account, which is incons…

Published Apr 28, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

The Security Manager in razorCMS before 0.4 does not verify the permissions of every file owned by the apache user account, which is inconsistent with the documentation and allows local users to have an unspecified impact.

References

http://razorcms.co.uk/support/viewtopic.php?f=13&t=325
20090416 [follow-up] razorCMS - Multiple Vulnerabilities mailing-list
20090416 razorCMS - Multiple Vulnerabilities mailing-list
34566 vdb-entry
razorcms-security-manager-unspecified(50358) vdb-entry