CVE-2019-16354: Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition)

September 16, 2019 (updated September 17, 2019)

The File Session Manager in Beego allows local users to read session files because there is a race condition involving file creation within a directory with weak permissions.

References

nvd.nist.gov/vuln/detail/CVE-2019-16354

Code Behaviors & Features

Detect and mitigate CVE-2019-16354 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →