snap-confine in snapd before 2.38 incorrectly set the ownership of a snap application to the uid and gid of the first calling user. Consequently, that user had unintended access to a private /tmp directory.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2019-04-24T20:02:32

Updated: 2019-04-25T17:06:03

Reserved: 2019-04-24T00:00:00


Link: CVE-2019-11502

JSON object: View

cve-icon NVD Information

Status : Analyzed

Published: 2019-04-24T21:29:00.727

Modified: 2019-05-02T13:35:31.683


Link: CVE-2019-11502

JSON object: View

cve-icon Redhat Information

No data.

CWE