Teamwork Cloud
Approved changes feed: RSS · Atom
cpe:2.3:a:3ds:teamwork_cloud:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | 3Ds (a9939414-06e3-5fa1-bcc5-88736000d6ea) |
|---|---|
| Product | Teamwork Cloud (62f2558f-fcdc-5c71-a2f9-cc8370c4aed2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-25507 |
vulnerable | 2026-06-08 05:22:36.802487 |
Details available
An incorrect permission assignment during the installation script of TeamworkCloud 18.0 thru 19.0 allows a local unprivileged attacker to execute arbitrary code as root. During installation, the user is instructed to set the system enviroment file with world writable permissions (0777 /etc/environment). Any local unprivileged user can execute arbitrary code simply by writing to /etc/environment, which will force all users, including root, to execute arbitrary code during the next login or reboot. In addition, the entire home directory of the twcloud user at /home/twcloud is recursively given world writable permissions. This allows any local unprivileged attacker to execute arbitrary code, as twcloud. This product was previous named Cameo Enterprise Data Warehouse (CEDW).
Published: 2020-12-28T19:33:43.000Z
Updated: 2024-08-04T15:33:05.749Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.