2019-03-09 01:29:00 2019-06-03 17:29:13

An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename() across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to access the data.

Vector

NETWORK

Complexity

LOW

Authentication

NONE

Confidentiality

PARTIAL

Integrity

NONE

Availability

NONE
Php Php 7.3.2 (not an official CPE) Php Php 7.3.1 (not an official CPE) Php Php 7.3.0 (not an official CPE) Php Php 7.2.14 (not an official CPE) Php Php 7.2.13 (not an official CPE) Php Php 7.2.12 (not an official CPE) Php Php 7.2.11 (not an official CPE) Php Php 7.2.10 (not an official CPE) Php Php 7.2.9 (not an official CPE) Php Php 7.2.8 (not an official CPE) Php Php 7.2.7 (not an official CPE) Php Php 7.2.6 (not an official CPE) Php Php 7.2.5 (not an official CPE) Php Php 7.2.4 (not an official CPE) Php Php 7.2.3 (not an official CPE) Php Php 7.2.2 (not an official CPE) Php Php 7.2.1 (not an official CPE) Php Php 7.2.0 (not an official CPE) Php Php 7.1.25 (not an official CPE) Php Php 7.1.24 (not an official CPE) Php Php 7.1.23 (not an official CPE) Php Php 7.1.22 (not an official CPE) Php Php 7.1.21 (not an official CPE) Php Php 7.1.20 (not an official CPE) Php Php 7.1.19 (not an official CPE) Php Php 7.1.18 (not an official CPE) Php Php 7.1.17 (not an official CPE) Php Php 7.1.16 (not an official CPE) Php Php 7.1.15 (not an official CPE) Php Php 7.1.14 (not an official CPE) Php Php 7.1.13 (not an official CPE) Php Php 7.1.12 (not an official CPE) Php Php 7.1.11 (not an official CPE) Php Php 7.1.10 (not an official CPE) Php Php 7.1.9 (not an official CPE) Php Php 7.1.8 (not an official CPE) Php Php 7.1.7 (not an official CPE) Php Php 7.1.6 (not an official CPE) Php Php 7.1.5 (not an official CPE) Php Php 7.1.4 (not an official CPE) Php Php 7.1.3 (not an official CPE) Php Php 7.1.2 (not an official CPE) Php Php 7.1.1 (not an official CPE) Php Php 7.1.0 (not an official CPE) Php Php 7.0.31 (not an official CPE) Php Php 7.0.30 (not an official CPE) Php Php 7.0.29 (not an official CPE) Php Php 7.0.28 (not an official CPE) Php Php 7.0.27 (not an official CPE) Php Php 7.0.26 (not an official CPE) Php Php 7.0.25 (not an official CPE) Php Php 7.0.24 (not an official CPE) Php Php 7.0.23 (not an official CPE) Php Php 7.0.22 (not an official CPE) Php Php 7.0.21 (not an official CPE) Php Php 7.0.20 (not an official CPE) Php Php 7.0.19 (not an official CPE) Php Php 7.0.18 (not an official CPE) Php Php 7.0.17 (not an official CPE) Php Php 7.0.16 (not an official CPE) Php Php 7.0.15 (not an official CPE) Php Php 7.0.14 (not an official CPE) Php Php 7.0.13 (not an official CPE) Php Php 7.0.12 (not an official CPE) Php Php 7.0.11 (not an official CPE) Php Php 7.0.10 (not an official CPE) Php Php 7.0.9 (not an official CPE) Php Php 7.0.8 (not an official CPE) Php Php 7.0.7 (not an official CPE) Php Php 7.0.6 (not an official CPE) Php Php 7.0.5 (not an official CPE) Php Php 7.0.4 (not an official CPE) Php Php 7.0.3 (not an official CPE) Php Php 7.0.2 (not an official CPE) Php Php 7.0.1 (not an official CPE) Php Php 7.0.0 (not an official CPE) PHP PHP 6.0 Php Php 5.6.36 (not an official CPE) Php Php 5.6.34 (not an official CPE) Php Php 5.6.33 (not an official CPE) Php Php 5.6.32 (not an official CPE) Php Php 5.6.31 (not an official CPE) Php Php 5.6.30 (not an official CPE) Php Php 5.6.29 (not an official CPE) Php Php 5.6.28 (not an official CPE) Php Php 5.6.27 (not an official CPE) Php Php 5.6.26 (not an official CPE) Php Php 5.6.25 (not an official CPE) Php Php 5.6.24 (not an official CPE) Php Php 5.6.23 (not an official CPE) Php Php 5.6.22 (not an official CPE) Php Php 5.6.21 (not an official CPE) Php Php 5.6.20 (not an official CPE) Php Php 5.6.19 (not an official CPE) Php Php 5.6.18 (not an official CPE) Php Php 5.6.17 (not an official CPE) Php Php 5.6.16 (not an official CPE) Php Php 5.6.15 (not an official CPE) Php Php 5.6.14 (not an official CPE) Php Php 5.6.13 (not an official CPE) Php Php 5.6.12 (not an official CPE) Php Php 5.6.11 (not an official CPE) Php Php 5.6.10 (not an official CPE) Php Php 5.6.9 (not an official CPE) Php Php 5.6.8 (not an official CPE) PHP 5.6.7 PHP 5.6.6 PHP 5.6.5 PHP 5.6.4 PHP 5.6.3 PHP 5.6.2 Php Php 5.6.1 (not an official CPE) PHP 5.6.0 beta4 PHP 5.6.0 beta3 PHP 5.6.0 beta2 PHP 5.6.0 beta1 PHP 5.6.0 alpha5 PHP 5.6.0 alpha4 PHP 5.6.0 alpha3 PHP 5.6.0 alpha2 PHP 5.6.0 alpha1 Php Php 5.6.0 (not an official CPE) Php Php 5.5.38 (not an official CPE) Php Php 5.5.37 (not an official CPE) Php Php 5.5.36 (not an official CPE) Php Php 5.5.35 (not an official CPE) Php Php 5.5.34 (not an official CPE) Php Php 5.5.33 (not an official CPE) Php Php 5.5.32 (not an official CPE) Php Php 5.5.31 (not an official CPE) Php Php 5.5.30 (not an official CPE) Php Php 5.5.29 (not an official CPE) Php Php 5.5.28 (not an official CPE) Php Php 5.5.27 (not an official CPE) Php Php 5.5.26 (not an official CPE) Php Php 5.5.25 (not an official CPE) Php Php 5.5.24 (not an official CPE) PHP 5.5.23 PHP 5.5.22 PHP 5.5.21 PHP 5.5.20 PHP 5.5.19 PHP 5.5.18 Php Php 5.5.17 (not an official CPE) Php Php 5.5.16 (not an official CPE) Php Php 5.5.15 (not an official CPE) PHP 5.5.14 PHP 5.5.13 PHP 5.5.12 PHP 5.5.11 PHP 5.5.10 PHP 5.5.9 PHP 5.5.8 PHP 5.5.7 PHP 5.5.6 PHP 5.5.5 PHP 5.5.4 PHP 5.5.3 PHP 5.5.2 PHP 5.5.1 PHP 5.5.0 release candidate 2 PHP 5.5.0 release candidate 1 PHP 5.5.0 beta4 PHP 5.5.0 beta3 PHP 5.5.0 beta2 PHP 5.5.0 beta1 PHP 5.5.0 alpha6 PHP 5.5.0 alpha5 PHP 5.5.0 alpha4 PHP 5.5.0 alpha3 PHP 5.5.0 alpha2 PHP 5.5.0 alpha1 PHP 5.5.0 Php Php 5.4.45 (not an official CPE) Php Php 5.4.44 (not an official CPE) Php Php 5.4.43 (not an official CPE) Php Php 5.4.42 (not an official CPE) Php Php 5.4.41 (not an official CPE) Php Php 5.4.40 (not an official CPE) PHP 5.4.39 PHP 5.4.38 PHP 5.4.37 Php Php 5.4.36 (not an official CPE) PHP 5.4.35 PHP PHP 5.4.34 Php Php 5.4.33 (not an official CPE) Php Php 5.4.32 (not an official CPE) Php Php 5.4.31 (not an official CPE) PHP 5.4.30 PHP 5.4.29 PHP 5.4.28 PHP 5.4.27 PHP 5.4.26 PHP 5.4.25 PHP 5.4.24 PHP 5.4.23 PHP 5.4.22 PHP 5.4.21 PHP 5.4.20 PHP 5.4.19 PHP 5.4.18 PHP 5.4.17 PHP 5.4.16 release candidate 1 Php Php 5.4.16 (not an official CPE) PHP 5.4.15 release candidate 1 Php Php 5.4.15 (not an official CPE) PHP 5.4.14 release candidate 1 PHP 5.4.14 PHP 5.4.13 release candidate 1 PHP 5.4.13 PHP 5.4.12 release candidate 2 PHP 5.4.12 release candidate 1 PHP 5.4.12 PHP 5.4.11 PHP 5.4.10 PHP 5.4.9 PHP 5.4.8 PHP 5.4.7 PHP 5.4.6 PHP 5.4.5 PHP 5.4.4 PHP 5.4.3 PHP 5.4.2 PHP 5.4.1 PHP 5.4.0 Php Php 5.3.29 (not an official CPE) PHP 5.3.28 PHP 5.3.27 PHP 5.3.26 PHP 5.3.25 PHP 5.3.24 PHP 5.3.23 PHP 5.3.22 PHP 5.3.21 PHP 5.3.20 PHP 5.3.19 PHP 5.3.18 PHP 5.3.17 PHP 5.3.16 PHP 5.3.15 PHP 5.3.14 PHP 5.3.13 PHP 5.3.12 PHP 5.3.11 PHP 5.3.10 PHP 5.3.9 PHP 5.3.8 PHP 5.3.7 PHP 5.3.6 PHP 5.3.5 PHP 5.3.4 PHP 5.3.3 PHP 5.3.2 PHP 5.3.1 PHP 5.3.0 PHP 5.2.17 PHP 5.2.16 PHP 5.2.15 PHP 5.2.14 PHP 5.2.13 PHP 5.2.12 PHP 5.2.11 PHP 5.2.10 PHP 5.2.9 PHP 5.2.8 PHP 5.2.7 PHP 5.2.6 PHP 5.2.5 PHP 5.2.4 PHP 5.2.3 PHP 5.2.2 PHP 5.2.1 PHP 5.2.0 PHP PHP 5.1.6 PHP PHP 5.1.5 PHP 5.1.4 PHP PHP 5.1.3 PHP PHP 5.1.2 PHP PHP 5.1.1 PHP PHP 5.1.0 Php Php 5.1 (not an official CPE) PHP PHP 5.0.5 PHP PHP 5.0.4 PHP PHP 5.0.3 PHP PHP 5.0.2 PHP PHP 5.0.1 PHP PHP 5.0.0 RC3 PHP PHP 5.0.0 RC2 PHP PHP 5.0.0 RC1 PHP PHP 5.0.0 Beta4 PHP PHP 5.0.0 Beta3 PHP PHP 5.0.0 Beta2 PHP PHP 5.0.0 Beta1 PHP PHP 5.0.0 PHP 4.4.9 PHP 4.4.8 PHP PHP 4.4.7 PHP PHP 4.4.6 PHP PHP 4.4.5 PHP PHP 4.4.4 PHP PHP 4.4.3 PHP PHP 4.4.2 PHP PHP 4.4.1 PHP PHP 4.4.0 PHP PHP 4.3.11 PHP PHP 4.3.10 PHP PHP 4.3.9 PHP PHP 4.3.8 PHP PHP 4.3.7 PHP PHP 4.3.6 PHP PHP 4.3.5 PHP PHP 4.3.4 PHP PHP 4.3.3 PHP PHP 4.3.2 PHP PHP 4.3.1 PHP PHP 4.3.0 Php Php 4.3 (not an official CPE) Php Php 4.2.4 (not an official CPE) PHP PHP 4.2.3 PHP PHP 4.2.2 PHP PHP 4.2.1 PHP PHP 4.2.0 Php Php 4.2 (not an official CPE) Php Php 4.1.3 (not an official CPE) PHP PHP 4.1.2 PHP PHP 4.1.1 PHP PHP 4.1.0 PHP PHP 4.0.7 PHP PHP 4.0.6 PHP PHP 4.0.5 PHP PHP 4.0.4 PHP PHP 4.0.3 PHP PHP 4.0.2 PHP PHP 4.0.1 PHP PHP 4.0.0 PHP PHP 4.0 Beta 4 Patch Level 1 PHP PHP 4.0 Beta 4 PHP PHP 4.0 Beta 3 PHP PHP 4.0 Beta 2 PHP PHP 4.0 Beta 1 Php Php 4.0 (not an official CPE) PHP PHP 3.0.18 PHP PHP 3.0.17 PHP PHP 3.0.16 PHP PHP 3.0.15 PHP PHP 3.0.14 PHP PHP 3.0.13 PHP PHP 3.0.12 PHP PHP 3.0.11 PHP PHP 3.0.10 PHP PHP 3.0.9 PHP PHP 3.0.8 PHP PHP 3.0.7 PHP PHP 3.0.6 PHP PHP 3.0.5 PHP PHP 3.0.4 PHP PHP 3.0.3 PHP PHP 3.0.2 PHP PHP 3.0.1 Php Php 1.3.1 (not an official CPE) Php Php 1.4 (not an official CPE) PHP PHP_FI 2.0 Php Php 2.0.0 (not an official CPE) Php Php 2.0.2 (not an official CPE) PHP PHP_FI 2.0b10 PHP PHP 3.0 Php Php 1.2.0 (not an official CPE) Php Php 1.2.2 (not an official CPE) Php Php 1.2.4 (not an official CPE) Php Php 1.1.0 (not an official CPE) Php Php 1.0.4 (not an official CPE) Php Php 1.0.2 (not an official CPE) PHP PHP_FI 1.0 Php Php 0.90 (not an official CPE) Php Php 0.10 (not an official CPE) Php Php 0.9.3 (not an official CPE) Php Php 0.9.1 (not an official CPE) Php Php 0.9 (not an official CPE) Php Php 0.7 (not an official CPE) Php Php 0.5.3 (not an official CPE) Php Php 0.5 (not an official CPE) Php Php 0.3 (not an official CPE) Php Php 0.2.3 (not an official CPE) Php Php 0.2.1 (not an official CPE) Php Php 0.2 (not an official CPE) Php Php - (not an official CPE) Php Php 0.1 (not an official CPE) Netapp Storage automation store - (not an official CPE)