Vulnerabilities > Skolelinux > Debian EDU Config > 2.12.9

DATE CVE VULNERABILITY TITLE RISK
2022-02-11 CVE-2021-20001 Incorrect Default Permissions vulnerability in multiple products
It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares (~/public_html), which could result in privilege escalation.
network
low complexity
skolelinux debian CWE-276
critical
 9.8
9.8