Incorrect Permission Assignment in System Files Leads to Password Hash Disclosure

Executive Summary

This vulnerability is an Incorrect Permission Assignment for a Critical Resource (CWE-732) that allows unauthorized disclosure of password hashes. It occurs when system files containing sensitive information are improperly protected, enabling an attacker with privileged local access to read these files.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability involves incorrect permission assignment for critical resources, potentially leading to unauthorized disclosure of password hashes and account compromise by an attacker with privileged local access.

Such unauthorized disclosure of sensitive authentication data could negatively impact compliance with standards and regulations like GDPR and HIPAA, which require protection of personal and sensitive information to prevent unauthorized access and data breaches.

However, specific impacts on compliance are not detailed in the provided information.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to unauthorized disclosure of password hashes, which may result in potential account compromise. An attacker with privileged local access could exploit this to gain further unauthorized access to the system.

Useful 0 Not Useful 0