High severity · published May 26, 2021
CVE-2018-16494
In VOS and overly permissive "umask" may allow for authorized users of the server to gain unauthorized access through insecure file permissions that can result in an arbitrary…
8.8
CVSS
1.9%
EPSS
No
On KEV
Description
In VOS and overly permissive "umask" may allow for authorized users of the server to gain unauthorized access through insecure file permissions that can result in an arbitrary read, write, or execution of newly created files and directories. Insecure umask setting was present throughout the Versa servers.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VO
Versa Operating System · Versa-networks
before 16.1r2s11; 20.2.0 before 20.2.2; 21.1.0 before 21.1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-16494
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-16494
Third Party Advisory
https://hackerone.com/reports/1168191
More from Versa Operating System
8.8
CVE-2018-16495
In VOS user session identifier (authentication token) is issued to the browser prior to authentication but is not changed after the user successfully logs into the application
5.9
CVE-2018-16499
In VOS compromised, an attacker at network endpoints can possibly view communications between an unsuspecting user and the service using man-in-the-middle attacks
5.5
CVE-2019-25030
In Versa Director, Versa Analytics and VOS, Passwords are not hashed using an adaptive cryptographic hash function or key derivation function prior to storage