Incorrect Permission Assignment for Critical Resource

Disclosed: 2018-11-14 09:03:30 By dhiraj-mishra To mariadb
Medium
Vulnerability Details
Dear Team, Product Affected: https://github.com/MariaDB/server File: /server/blob/10.3/sql/mysqld.cc#L2761 ``` } if (!SetSecurityDescriptorDacl(&sdPipeDescriptor, TRUE, NULL, FALSE)) { ``` This was purely identified on code review, Never create NULL ACLs. A mail was sent to [email protected] and MariaDB team is working on this and a fix will be pushed in next version, attached mail headers for your reference. ## Impact An attacker can set it to Everyone (Deny All Access), which would even forbid administrator access and may lead to privilege escalation.
Actions
View on HackerOne
Report Stats
  • Report ID: 394861
  • State: Closed
  • Substate: resolved
  • Upvotes: 5
Share this report