Passgo SSO Plus Local Insecure Default Directory Permisions Vulnerability

info
discussion
exploit
solution
references

Passgo SSO Plus Local Insecure Default Directory Permisions Vulnerability

Passgo SSO Plus is prone to a local insecure-default-directory-persmissions vulnerability.

A local attacker could exploit this issue to have arbitrary code execute with elevated privileges.

Passgo SSO Plus 2.1.0.32 is vulnerable; other versions may also be affected.