Approved changes feed: RSS · Atom

cpe:2.3:a:planet:planet:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPlanet (8ec268c0-d586-5bdd-b738-39b77072c2c8)
ProductPlanet (64c3ee42-2b41-5e42-8ab7-43ecc132e602)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-32303 vulnerable 2026-06-03 14:51:58.156133 Planet's secret file is created with excessive permissions
MEDIUM (5.2)
Planet is software that provides satellite data. The secret file stores the user's Planet API authentication information. It should only be accessible by the user, but before version 2.0.1, its permissions allowed the user's group and non-group to read the file as well. This issue was patched in version 2.0.1. As a workaround, set the secret file permissions to only user read/write by hand.
Published: 2023-05-12T20:55:07.601Z
Updated: 2025-01-23T20:24:55.121Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.