Vulnerabilities > Gnome > Gvfs > 1.8.2

DATE CVE VULNERABILITY TITLE RISK
2019-06-11 CVE-2019-12795 Incorrect Default Permissions vulnerability in Gnome Gvfs
daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a private D-Bus server socket without configuring an authorization rule.
local
low complexity
gnome CWE-276
7.8
2019-03-25 CVE-2019-3827 Incorrect Authorization vulnerability in Gnome Gvfs
An incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that allows reading and modify arbitrary files by privileged users without asking for password when no authentication agent is running.
local
gnome CWE-863
3.3