Approved changes feed: RSS · Atom

cpe:2.3:a:planetlabs:planet-client-python:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPlanetlabs (bde5576e-6b44-5703-9d11-03b1601d4424)
ProductPlanet Client Python (b527a994-5676-5f22-be17-7c460a27ebc8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-32303 vulnerable 2026-06-08 06:04:45.463942 Planet's secret file is created with excessive permissions
MEDIUM (5.2)
Planet is software that provides satellite data. The secret file stores the user's Planet API authentication information. It should only be accessible by the user, but before version 2.0.1, its permissions allowed the user's group and non-group to read the file as well. This issue was patched in version 2.0.1. As a workaround, set the secret file permissions to only user read/write by hand.
Published: 2023-05-12T20:55:07.601Z
Updated: 2025-01-23T20:24:55.121Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.