Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PHP Permissions Privileges and Access Controls Vulnerability - CVE-2019-9637 - Vulnerability Database
PHP

PHP Permissions Privileges and Access Controls Vulnerability - CVE-2019-9637

High
Reference: CVE-2019-9637
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-9637
Title: PHP Permissions Privileges and Access Controls Vulnerability
Overview:

An issue was discovered in PHP before 7.1.27 7.2.x before 7.2.16 and 7.3.x before 7.3.3. Due to the way rename() across filesystems is implemented it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing thus enabling unauthorized users to access the data.