CWE-1386: Insecure Operation on Windows Junction / Mount Point
The product opens a file or directory, but it does not properly prevent the name from being associated with a junction or mount point to a destination that is outside of the intended control sphere.
A kind of CWE-59 insecure temporary file.
From the CWE List. © The MITRE Corporation.
Newest
- veeam backup for microsoft 365 A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM... 4.3 Medium
- go standard library os, internal/syscall/windows +1 more Root.Mkdir(All) can follow junctions out of the root on Windows in os 9.8 Critical
- veeam agent for windows This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to... 4.1 Medium
- dell inventory collector client Dell Inventory Collector Client, versions prior to 13.8.0, contain an Improper Link Resolution... 6.3 Medium
- gen digital norton secure vpn Privilege escalation during the installation of Norton Secure VPN via the Microsoft Store 8.8 High
- amd uprof, μprof +1 more A junction point vulnerability within AMD uProf can allow a local low-privileged attacker to... 6.6 Medium
- eset endpoint antivirus, safe server, small business security +14 more +16 more Local privilege escalation in ESET products for Windows 8.5 High
- dell dup framework, update package framework +1 more DUP framework version 4.9.4.36 and prior contains insecure operation on Windows junction/Mount... 6.3 Medium
- dell display manager Dell Display Manager application, version 2.1.1.17 and prior, contain an insecure operation on... 6.6 Medium
- hashicorp vagrant Vagrant’s Windows Installer Allowed Directory Junction Write 3.8 Low
- sap businessobjects, sap se businessobjects suite (installer) +1 more Arbitrary File Delete via Directory Junction in SAP BusinessObjects Suite(installer) 6.2 Medium
- dell digital delivery Dell Digital Delivery versions prior to 5.0.82.0 contain an Insecure Operation on Windows... 5.0 Medium
- dell alienware update, update, command update +1 more +3 more Dell Command | Update, Dell Update, and Alienware Update versions 4.8.0 and prior contain an... 6.7 Medium
- dell alienware update, update, command update +1 more +3 more Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain... 6.3 Medium
- dell command \| intel vpro out of band, command update (dcu) +1 more Dell Command | Intel vPro Out of Band, versions before 4.4.0, contain an arbitrary folder delete... 4.7 Medium
- dell command \| integration suite for system center, command integration suite for system center (dcis) +1 more Dell Command | Integration Suite for System Center, versions before 6.4.0 contain an arbitrary... 4.7 Medium
- dell alienware update, command update, command update (dcu) +2 more Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain... 5.5 Medium
- nvidia geforce experience NVIDIA GeForce Experience contains a vulnerability in the installer, where a user installing the... 8.2 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +35 more +37 more Windows Print Spooler Elevation of Privilege Vulnerability 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +35 more +37 more Windows User Profile Service Elevation of Privilege Vulnerability 7.0 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +36 more +38 more Windows Installer Elevation of Privilege Vulnerability 5.5 Medium