Early Access — Mondoo Vulnerability Intelligence is currently in preview.

Mondoo Vulnerability Intelligence

Search vulnerabilities and malicious packages across npm, PyPI, Go, GitHub Actions, VS Code, and more.

DEBIAN-CVE-2025-68462 | Mondoo Vulnerability Intelligence

DEBIAN-CVE-2025-68462

LOW3.2

Freedombox before 25.17.1 does not set proper permissions for the backups-data directory, allowing the reading of dump files of databases.

Published Dec 18, 2025

Modified 1 weeks ago

Fix available

Details

Freedombox before 25.17.1 does not set proper permissions for the backups-data directory, allowing the reading of dump files of databases.

Affected Packages

Debian:11freedombox

Affected versions:

21.1021.10~bpo11+121.1121.11~bpo11+121.1221.12~bpo11+121.1321.1421.14.121.14.1~bpo11+1+206 more

Debian:12freedombox

Affected versions:

23.1023.1123.1223.12~bpo12+123.1323.13~bpo12+123.1423.14~bpo12+123.1523.15~bpo12+1+116 more

Debian:13freedombox

Affected versions:

25.1025.10~bpo13+125.1125.11~bpo13+125.1225.12~bpo13+125.1325.13.125.13.1~bpo13+125.13~bpo13+1+12 more

Debian:14freedombox

Fixed in:

25.17.1

References

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2025-68462

CVSS Analysis

CVSS v3.1

3.2

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

HighAC:H

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

ChangedS:C

Impact

Confidentiality

LowC:L

Integrity

NoneI:N

Availability

NoneA:N

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N

Upstream

CVE-2025-68462

Ecosystems

Debian 11 Debian 12 Debian 13 Debian 14

Timeline

PublishedDec 18, 2025

ModifiedDec 19, 2025