Loading HuntDB...

Incorrect Permission Assignment for Critical Resource

Medium
M
MariaDB
Submitted None
Reported by dhiraj-mishra

Vulnerability Details

Technical details and impact analysis

Privilege Escalation
Dear Team, Product Affected: https://github.com/MariaDB/server File: /server/blob/10.3/sql/mysqld.cc#L2761 ``` } if (!SetSecurityDescriptorDacl(&sdPipeDescriptor, TRUE, NULL, FALSE)) { ``` This was purely identified on code review, Never create NULL ACLs. A mail was sent to [email protected] and MariaDB team is working on this and a fix will be pushed in next version, attached mail headers for your reference. ## Impact An attacker can set it to Everyone (Deny All Access), which would even forbid administrator access and may lead to privilege escalation.

Report Details

Additional information and metadata

State

Closed

Substate

Resolved

Submitted

Weakness

Privilege Escalation