CWE-59: insecure temporary file
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
Also known as Improper Link Resolution Before File Access, Zip Slip, Link Following.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- opensuse factory, munge, suse linux enterprise server 15 +2 moreLocal privilege escalation from user munge to root7.7 High
- suse permissions, opensuse leap +1 morechkstat follows untrusted symbolic links6.8 Medium
- dell command update, command update (dcu) +1 moreDell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A...5.6 Medium
- dell command update, command update (dcu) +1 moreDell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A...5.6 Medium
- hardlink, debian linux, redhat enterprise linux +2 moreHardlink before 0.1.2 operates on full file system objects path names which can allow a local...7.1 High
- openvas openvas-scanneropenvas-scanner before 2011-09-11 creates a temporary file insecurely when generating OVAL system...7.1 High
- opensuse leap 15.1, suse mailman, linux enterprise server 11 +2 more +4 moreLocal privilege escalation from user wwwrun to root in the packaging of mailman7.7 High
- eracent sum agent, eda agent, epa agent +3 more +5 moreAn issue was discovered in Eracent EDA, EPA, EPM, EUA, FLW, and SUM Agent through 10.2.26. The...5.5 Medium
- shibboleth service providerShibboleth Service Provider (SP) 3.x before 3.1.0 shipped a spec file that calls chown on files...7.8 High
- rply project rplyLink Following in rply5.5 Medium
- debian linux, fedoraproject fedora, foomatic-filters +2 morefoomatic-rip filter v4.0.12 and prior used insecurely creates temporary files for storage of...5.5 Medium
- debian linux, foomatic-filters +1 morefoomatic-rip filter, all versions, used insecurely creates temporary files for storage of...5.5 Medium
- getfiregpg iceweasel-firegpgA symlink issue exists in Iceweasel-firegpg before 0.6 due to insecure tempfile handling.7.8 High
- debian linux, tesseract-ocr tesseract ocr +1 moreIn tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID...4.7 Medium
- pithos, debian linux +1 morepithos before 0.3.5 allows overwrite of arbitrary files via symlinks.5.5 Medium
- containers crun, fedoraproject fedora +1 moreAn issue was discovered in crun before 0.10.5. With a crafted image, it doesn't correctly check...8.6 High
- belkin n900 firmwareSymlink Traversal vulnerability in Belkin N900 due to misconfiguration in the SMB service.7.5 High
- mailscannermailscanner before 4.79.11-2.1 might allow local users to overwrite arbitrary files via a symlink...4.7 Medium
- microsoft visual studio 2017, visual studio 2019 +1 moreAn elevation of privilege vulnerability exists when Visual Studio fails to properly validate...6.5 Medium
- microsoft windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems, windows 10 version 1903 for x64-based systems +2 more +4 moreAn elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +11 more +13 moreAn elevation of privilege vulnerability exists in the way that the iphlpsvc.dll handles file...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +9 more +11 moreAn elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions...7.8 High
- atop, debian linux +1 moreatop: symlink attack possible due to insecure tempfile handling7.8 High
- helmHelm Unsafe Link Following9.8 Critical
- clusterlabs pacemakerPacemaker before 1.1.6 configure script creates temporary files insecurely5.5 Medium
- alsa-project alsa, alsa-driver +1 morealsa-utils 1.0.19 and later versions allows local users to overwrite arbitrary files via a...5.5 Medium
- gambas project gambas, debian linux, gambas3 +2 moreGambas before 3.4.0 allows remote attackers to move or manipulate directory contents or perform...7.5 High
- debian lintian, canonical ubuntu linux, debian linux +2 moreLintian before 2.5.12 allows remote attackers to gather information about the "host" system using...6.3 Medium
- totaldefense anti-virusThe quarantine restoration function in Total Defense Anti-virus 11.5.2.28 is vulnerable to...5.5 Medium
- autokey project autokeyThe init script in autokey before 0.61.3-2 allows local attackers to write to arbitrary files via...6.5 Medium
- rpcbindrpcbind 0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink...7.1 High
- ikiwiki, debian linux +1 moreikiwiki before 3.20110608 allows remote attackers to hijack root's tty and run symlink attacks.8.2 High
- apache hadoopHadoop symlink vulnerability7.5 High
- libpod project libpodPodman Symlink Vulnerability5.5 Medium
- trend micro deep security agent, trendmicro deep security +1 moreVersions 10.0, 11.0 and 12.0 of the Trend Micro Deep Security Agent are vulnerable to an...7.1 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +11 more +13 moreAn elevation of privilege vulnerability exists when Windows Error Reporting manager improperly...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +6 more +8 moreA denial of service vulnerability exists when Windows improperly handles hard links, aka ...7.3 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +16 more +18 moreAn elevation of privilege vulnerability exists when Windows Error Reporting manager improperly...7.8 High
- cisco ios, ios xe software 3.11.1s +1 moreCisco IOS XE Software Arbitrary Code Execution Vulnerability6.2 Medium
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +11 more +13 moreA remote code execution vulnerability exists in Microsoft Windows that could allow remote code...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +6 more +8 moreAn elevation of privilege vulnerability exists in Windows store installer where WindowsApps...5.5 Medium
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +10 more +12 moreAn elevation of privilege vulnerability exists in Microsoft Compatibility Appraiser where a...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +11 more +13 moreAn elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly...7.8 High
- avira free security suite, software updater +1 moreAn issue was discovered in Avira Free Security Suite 10. The permissive access rights on the...7.8 High
- apport project apport, canonical ubuntu linux +1 moreApport reads arbitrary files if ~/.config/apport/settings is a symlink3.8 Low
- ibm informix dynamic server enterprise edition, informix dynamic server +1 moreIBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with...8.2 High
- ibm informix dynamic server enterprise edition, informix dynamic server +1 moreIBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with...8.2 High
- ibm informix dynamic server enterprise edition, informix dynamic server +1 moreIBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with...8.2 High
- ibm informix dynamic server enterprise edition, informix dynamic server +1 moreIBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with...8.2 High
- ibm informix dynamic server enterprise edition, informix dynamic server +1 moreIBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with...8.2 High
- Show moreLoading…