PYSEC-2018-84

See a problem?
Import Source
https://github.com/pypa/advisory-database/blob/main/vulns/jsnapy/PYSEC-2018-84.yaml
JSON Data
https://api.osv.dev/v1/vulns/PYSEC-2018-84
Aliases
Published
2018-04-11T19:29:00Z
Modified
2023-11-08T03:59:30.169154Z
Summary
[none]
Details

JSNAPy is an open source python version of Junos Snapshot Administrator developed by Juniper available through github. The default configuration and sample files of JSNAPy automation tool versions prior to 1.3.0 are created world writable. This insecure file and directory permission allows unprivileged local users to alter the files under this directory including inserting operations not intended by the package maintainer, system administrator, or other users. This issue only affects users who downloaded and installed JSNAPy from github.

References

Affected packages

PyPI / jsnapy

Package

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.3.0

Affected versions

1.*

1.0.0
1.1.0
1.2.0
1.2.1
1.2.2