alpine 3.7
access weakness #5

The software specifies permissions for a security-critical resource in a way that allows that resource to be modified or read.

1

Weakness Breakdown


Warning code(s):

Ensure that umask is given most restrictive possible setting.

File Name:

./src/FreeRDP-2.0.0-rc2/channels/sshagent/server/sshagent_main.c

Context:
mode_t umask_sav = umask(0177);

The registered trademark Linux® is used pursuant to a sublicense from the Linux Foundation, the exclusive licensee of Linus Torvalds, owner of the mark on a world­wide basis.