Insecure File Permissions in Froxlor Affects Database Security

CVE-2024-58383

What is CVE-2024-58383?

Froxlor versions before 2.2.0 are vulnerable to an issue where sensitive database credentials are stored in the file /etc/pure-ftpd/db/mysql.conf with inadequate permissions (mode 0644). This allows local attackers to read the file if system directories are readable by all users. Exploiting this vulnerability, an unauthorized user can access the Froxlor SQL user password, which may lead to further administrative control and compromise of system integrity, especially in environments utilizing pure-ftpd.

References