high7.8
CVE-2019-18192
GNU Guix 1.0.1 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable,…
Impact
GNU Guix 1.0.1 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable, a similar issue to CVE-2019-17365.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gnu | Guix | Version 1.0.1 |