1. Home
  2. CVE Database
  3. CVE-2017-11353
MEDIUM · 5.9

CVE-2017-11353

yadm (yet another dotfile manager) 1.10.0 has a race condition (related to the behavior of git commands in setting permissions for new files and directories), which potentially allows access to SSH an...

Vulnerability Description

yadm (yet another dotfile manager) 1.10.0 has a race condition (related to the behavior of git commands in setting permissions for new files and directories), which potentially allows access to SSH and PGP keys.

CVSS Score

5.9

MEDIUM

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
Yadm ProjectYadm1.10.0

Related Weaknesses (CWE)

CWE-362

References

FAQ

What is CVE-2017-11353?

CVE-2017-11353 is a vulnerability with a CVSS score of 5.9 (MEDIUM). yadm (yet another dotfile manager) 1.10.0 has a race condition (related to the behavior of git commands in setting permissions for new files and directories), which potentially allows access to SSH an...

How severe is CVE-2017-11353?

CVE-2017-11353 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-11353?

Check the references section above for vendor advisories and patch information. Affected products include: Yadm Project Yadm.