Junglewise Threat Intelligence

CVE-2012-5578: PYSEC-2019-182 - Python keyring has insecure permissions on new databases allowing world-readable files to be created

CVE-2012-5578 · Severity: low · CVSS 3.1 · Published 2019-11-25

Technologies: keyring (PyPI). Vendors: PyPI.

Executive brief

Python keyring has insecure permissions on new databases allowing world-readable files to be created

Affected products

PyPI keyring

Related threats

PYSEC-2019-181 - Python keyring lib before 0.10 created keyring files with world-readable permissions.
PYSEC-2012-8 - Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier f