{"id":"CVE-2023-40361","aliases":["EUVD-2023-44932","GHSA-h2q7-whv7-5m3x"],"status":"published","title":"SECUDOS Qiata (DOMOS OS) 4.13 has Insecure Permissions for the previewRm.sh daily cronjob. To...","description":"SECUDOS Qiata (DOMOS OS) 4.13 has Insecure Permissions for the previewRm.sh daily cronjob. To exploit this, an attacker needs access as a low-privileged user to the underlying DOMOS system. Every user on the system has write permission for previewRm.sh, which is executed by the root user.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00292,"percentile":0.22084,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-732"],"published":"2023-10-20T00:00:00Z","modified":"2026-06-17T06:17:25Z","exploits":[{"source":"pocgithub","id":"vianic/CVE-2023-40361","title":"vianic/CVE-2023-40361","date":"2023-10-16","url":"https://github.com/vianic/CVE-2023-40361"}],"products":[{"vendor":"secudos","product":"qiata"}],"references":[{"url":"https://github.com/vianic/CVE-2023-40361/blob/main/advisory/advisory.md","tags":["x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40361"},{"url":"https://github.com/advisories/GHSA-h2q7-whv7-5m3x"}],"sources":{"cve":[{"id":"CVE-2023-40361","description":"SECUDOS Qiata (DOMOS OS) 4.13 has Insecure Permissions for the previewRm.sh daily cronjob. To exploit this, an attacker needs access as a low-privileged user to the underlying DOMOS system. Every user on the system has write permission for previewRm.sh, which is executed by the root user.","status":"published","published":"2023-10-20T00:00:00Z","modified":"2024-09-12T17:52:56.045Z","updated_at":"2026-11-02T14:35:21.971258Z"}],"euvd":[{"id":"EUVD-2023-44932","description":"SECUDOS Qiata (DOMOS OS) 4.13 has Insecure Permissions for the previewRm.sh daily cronjob. To exploit this, an attacker needs access as a low-privileged user to the underlying DOMOS system. Every user on the system has write permission for previewRm.sh, which is executed by the root user.","status":"published","published":"2023-10-20T00:00:00Z","modified":"2024-09-12T17:52:56Z","updated_at":"2026-11-03T00:55:56.835723Z"}],"ghsa":[{"id":"GHSA-h2q7-whv7-5m3x","title":"SECUDOS Qiata (DOMOS OS) 4.13 has Insecure Permissions for the previewRm.sh daily cronjob. To...","description":"SECUDOS Qiata (DOMOS OS) 4.13 has Insecure Permissions for the previewRm.sh daily cronjob. To exploit this, an attacker needs access as a low-privileged user to the underlying DOMOS system. Every user on the system has write permission for previewRm.sh, which is executed by the root user.","status":"published","published":"2023-10-20T06:30:19Z","modified":"2024-04-04T08:49:26Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:57:01.930483Z"}],"nvd":[{"id":"CVE-2023-40361","description":"SECUDOS Qiata (DOMOS OS) 4.13 has Insecure Permissions for the previewRm.sh daily cronjob. To exploit this, an attacker needs access as a low-privileged user to the underlying DOMOS system. Every user on the system has write permission for previewRm.sh, which is executed by the root user.","status":"published","published":"2023-10-20T06:15:17.297Z","modified":"2026-06-17T06:17:25.61Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:08:39.058878Z"}]}}