Tahoe-LAFS v1.3.0 through v1.8.2 could allow unauthorized users to delete immutable files in some cases.
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
Link | Tags |
---|---|
https://security-tracker.debian.org/tracker/CVE-2011-3617 | third party advisory |
https://access.redhat.com/security/cve/cve-2011-3617 | broken link |
https://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-3617.html | third party advisory |