VYPR
← All advisories
Medium severity4.7NVD Advisory· Published Sep 11, 2023· Updated Jun 17, 2026

CVE-2023-35845

CVE-2023-35845

Description

Anaconda 3 2023.03-1-Linux allows local users to disrupt TLS certificate validation by modifying the cacert.pem file used by the installed pip program. This occurs because many files are installed as world-writable on Linux, ignoring umask, even when these files are installed as root. Miniconda is also affected.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • osv-coords
    pkg:bitnami/miniconda
    Range: >= 2023.03-1.0, <= 2023.03-1.0
  • Anaconda/Anaconda3llm-fuzzy2 versions
    2023.03-1-Linux+ 1 more
    • (no CPE)range: 2023.03-1-Linux
    • cpe:2.3:a:anaconda:anaconda3:2023.03-1:*:*:*:*:*:*:*
  • Anaconda/Minicondallm-create
  • Anaconda/Anaconda 3 - Linuxdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.