CVE-2016-5087
Last modified
CVE-2016-5087 is a vulnerability of currently unknown severity. Alertus Desktop Notification before 2.9.31.1710 on OS X uses weak permissions for configuration files and unspecified other files, which allows local users to suppress emergency notifications or change content via standard filesystem operations.. EPSS estimates a 0.62% chance of exploitation in the next 30 days.
Description
Alertus Desktop Notification before 2.9.31.1710 on OS X uses weak permissions for configuration files and unspecified other files, which allows local users to suppress emergency notifications or change content via standard filesystem operations.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Alertus | Alertus Desktop Notification For Os X | <= 2.9.30.1700 |
References
- http://www.kb.cert.org/vuls/id/302544Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/BLUU-A9TJHRThird Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/302544Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/BLUU-A9TJHRThird Party Advisory, US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2016-5087?
How severe is CVE-2016-5087?
How do I fix CVE-2016-5087?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2016
- CVE-2016-5078Paessler PRTG before 16.2.24.4045 has XSS via SNMP.
- CVE-2016-5080Integer overflow in the rtxMemHeapAlloc function in asn1rt_a…
- CVE-2016-5081ZModo ZP-NE14-S and ZP-IBH-13W devices have a hardcoded root…
- CVE-2016-5084Johnson & Johnson Animas OneTouch Ping devices do not use en…
- CVE-2016-5085Johnson & Johnson Animas OneTouch Ping devices do not proper…
- CVE-2016-5086Johnson & Johnson Animas OneTouch Ping devices allow remote …
- CVE-2016-5091Extbase in TYPO3 4.3.0 before 6.2.24, 7.x before 7.6.8, and …
- CVE-2016-5092Directory traversal vulnerability in Fortinet FortiWeb befor…
- CVE-2016-5093The get_icu_value_internal function in ext/intl/locale/local…
- CVE-2016-5094Integer overflow in the php_html_entities function in ext/st…
- CVE-2016-5095Integer overflow in the php_escape_html_entities_ex function…
- CVE-2016-5096Integer overflow in the fread function in ext/standard/file.…
Are you affected by CVE-2016-5087?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST