Homepage
About Snyk

Insecure Defaults Affecting cerulean package, versions [,0.3.4)

0.0
medium

Snyk CVSS

    Attack Complexity Low

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk ID SNYK-PYTHON-CERULEAN-173987
  • published 20 Mar 2019
  • disclosed 13 Jan 2019
  • credit Unknown
Report a new vulnerability Found a mistake?

Introduced: 13 Jan 2019

CVE NOT AVAILABLE CWE-276 Open this link in a new tab

How to fix?

Upgrade cerulean to version 0.3.4 or higher.

Overview

cerulean is a Python 3 library for talking to HPC clusters and supercomputers.

Affected versions of this package are vulnerable to Insecure Defaults. The directory was created with 777 mode permissions which could lead to an arbitrary file write attack.

References