Skolelinux Debian Edu Config vulnerabilities

2 vulnerabilities

Known vulnerabilities in Skolelinux Debian Edu Config, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2021-20001debiandebian-edu-config+3
EPSS score
1.62%
It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares (~/public_html), which could result in privilege escalation.7.8CVE-2019-3467canonicalubuntu_linux+7
EPSS score
0.50%
Debian-edu-config all versions < 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config < 0.26, configured too permissive ACLs for the Kerberos admin server, which allowed password changes for other Kerberos user principals.