vulnerability
Ubuntu: (Multiple Advisories) (CVE-2020-7063): PHP vulnerabilities
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:L/Au:N/C:N/I:P/A:N) | Feb 27, 2020 | Apr 16, 2020 | Nov 15, 2024 |
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:P/A:N)
Published
Feb 27, 2020
Added
Apr 16, 2020
Modified
Nov 15, 2024
Description
In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData::buildFromIterator() function, the files are added with default permissions (0666, or all access) even if the original files on the filesystem were with more restrictive permissions. This may result in files having more lax permissions than intended when such archive is extracted.
Solution(s)
ubuntu-pro-upgrade-libapache2-mod-php5ubuntu-pro-upgrade-libapache2-mod-php7-0ubuntu-pro-upgrade-libapache2-mod-php7-2ubuntu-pro-upgrade-libapache2-mod-php7-3ubuntu-pro-upgrade-php5-cgiubuntu-pro-upgrade-php5-cliubuntu-pro-upgrade-php5-fpmubuntu-pro-upgrade-php7-0-cgiubuntu-pro-upgrade-php7-0-cliubuntu-pro-upgrade-php7-0-fpmubuntu-pro-upgrade-php7-2ubuntu-pro-upgrade-php7-2-cgiubuntu-pro-upgrade-php7-2-cliubuntu-pro-upgrade-php7-2-fpmubuntu-pro-upgrade-php7-3-cgiubuntu-pro-upgrade-php7-3-cliubuntu-pro-upgrade-php7-3-fpmubuntu-pro-upgrade-php7-3-mbstring
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.