It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares (~/public_html), which could result in privile…
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.01615·Published 2022-02-11·Fixed in 2.12.16CWE-276
Debian-edu-config all versions < 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config < 0.26, configured too permissive ACLs for the Kerberos admin server, which allowed password changes for o…
CVSS 3.1HIGH 7.8·Local·Low privileges·No interaction·EPSS 0.00503·Published 2019-12-23·Fixed in 2.11.10CWE-732