CVE-2016-5087 Alertus Desktop Notification before 2.9.31.1710 on OS X uses weak permissions for configuration files and unspecified other files, which allows local users to suppress emergency notifications or chang...
MediumCVSS 4.4
EPSS 0.62%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Alertus Desktop Notification before 2.9.31.1710 on OS X uses weak permissions for configuration files and unspecified other files, which allows local users to suppress emergency notifications or change content via standard filesystem operations.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| alertus desktop notification for os x | <= 2.9.30.1700 | No fix listed |
References
- VU#302544 third-party-advisory us-government-resource
- www.kb.cert.org third-party-advisory us-government-resource