CWE-59: insecure temporary file
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
Also known as Improper Link Resolution Before File Access, Zip Slip, Link Following.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- apport project apport, canonical ubuntu linux +1 moreWorld writable root owned lock file created in user controllable location6.5 Medium
- docker desktopDocker Desktop allows local privilege escalation to NT AUTHORITY\SYSTEM because it mishandles the...6.7 Medium
- vmware fusion, horizon client, remote console +1 more +3 moreVMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1)...7.8 High
- microsoft visual studio 2019, visual studio 2019 version 16.4 (includes 16.0 - 16.3) +1 moreA denial of service vulnerability exists when the Visual Studio Extension Installer Service...7.1 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +24 more +26 moreAn elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +15 more +17 moreAn elevation of privilege vulnerability exists in the Windows Installer when MSI packages process...5.5 Medium
- timeshift project timeshift, canonical ubuntu linux, fedoraproject fedora +2 moreinit_tmp in TeeJee.FileSystem.vala in Timeshift before 20.03 unsafely reuses a preexisting...7.0 High
- opensuse factory, suse linux enterprise server, linux enterprise server 12 +2 more +4 moreLocal privilege escalation from user salt to root8.4 High
- suse linux enterprise server, linux enterprise server 11, linux enterprise server 12 +2 more +4 morepermissions: chkstat sets unintended setuid/capabilities for mrsh and wodim2.2 Low
- nagios, opensuse factory, suse linux enterprise server 11 +3 more +5 morenagios cron job allows privilege escalation from user nagios to root5.7 Medium
- apple macos, mac os x +1 moreA validation issue existed in the handling of symlinks. This issue was addressed with improved...4.4 Medium
- apple macos, mac os x +1 moreA validation issue existed in the handling of symlinks. This issue was addressed with improved...3.3 Low
- suse linux enterprise server, linux enterprise server 12, linux enterprise server 15 +1 more +3 moremysql-systemd-helper allows setting 640 permissions of arbitrary files5.1 Medium
- debian x11-common, linux +1 moreThe init script in the Debian x11-common package before 1:7.6+12 is vulnerable to a symlink...7.8 High
- dell client consumer and commercial platforms, g3 15 3590 firmware, g3 3579 firmware +111 more +113 moreDell Client Consumer and Commercial Platforms contain an Arbitrary File Overwrite Vulnerability....7.1 High
- amd user experience programThe AUEPLauncher service in Radeon AMD User Experience Program Launcher through 1.0.0.1 on...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +15 more +17 moreAn elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc)...7.1 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +24 more +26 moreAn elevation of privilege vulnerability exists in the Windows Installer when MSI packages process...7.8 High
- mariadbmysql_install_db in MariaDB 10.4.7 through 10.4.11 allows privilege escalation from the mysql...7.8 High
- kuberneteskubectl cp allows symlink directory traversal4.8 Medium
- file::temp, cpan file\ +1 more_is_safe in the File::Temp module for Perl does not properly handle symlinks.3.3 Low
- bitdefender total security 2020Bitdefender Total Security Link Resolution Denial-of-Service Vulnerability4.9 Medium
- apple tokendGemalto Tokend 2013 has an Arbitrary File Creation/Overwrite Vulnerability6.1 Medium
- opensc opensc.tokend, opensc project opensc +1 moreOpenSC OpenSC.tokend has an Arbitrary File Creation/Overwrite Vulnerability6.1 Medium
- git-extrasThe git-changelog utility in git-extras 1.7.0 allows local users to overwrite arbitrary files via...5.5 Medium
- opensuse factory, leap 15.1, privoxy +2 moreLocal privilege escalation from user privoxy to root7.7 High
- gnu gnump3d, opensuse leap, leap 15.1 +2 moreLocal privilege escalation from user gnump3d to root7.7 High
- opensuse factory, leap 15.1, munin +2 moreLocal privilege escalation from munin to root in the packaging of munin7.7 High
- opensuse factory, leap, leap 15.1 +3 more +5 moreLocal privilege escalation from user news to root in the packaging of inn7.7 High
- storebackup, canonical ubuntu linux, debian linux +2 more +4 morestoreBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which...8.1 High
- squid analysis report generator project analysis report generator, opensuse backports sle, leap +2 morelog.c in Squid Analysis Report Generator (sarg) through 2.3.11 allows local privilege escalation....7.0 High
- microsoft update notification manager, windows, windows 10 version 1903 for 32-bit systems +17 more +19 moreAn elevation of privilege vulnerability exists in the way the Update Notification Manager handles...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +10 more +12 moreA denial of service vulnerability exists when Windows improperly handles hard links, aka ...5.5 Medium
- abrt, redhat automatic bug reporting tool, enterprise linux desktop +5 more +7 moredaemon/abrt-handle-upload.in in Automatic Bug Reporting Tool (ABRT), when moving problem reports...6.5 Medium
- abrt, redhat automatic bug reporting tool +1 moreThe default event handling scripts in Automatic Bug Reporting Tool (ABRT) allow local users to...7.8 High
- k7computing k7 ultimate securityIn K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll (aka the backup module) improperly...7.8 High
- trend micro antivirus for mac, trendmicro antivirus +1 moreA privilege escalation vulnerability in Trend Micro Antivirus for Mac 2019 (v9.0.1379 and below)...7.5 High
- check point endpoint security client for windows, checkpoint endpoint security clients +1 moreA denial of service vulnerability was reported in Check Point Endpoint Security Client for...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP versions 15.0.0-15.0.1, 14.1.0.2-14.1.2.2, 14.0.0.5-14.0.1, 13.1.1.5-13.1.3.1, 12.1.4.1...3.3 Low
- trend micro security (consumer), trend micro, inc. micro security (consumer), trendmicro antivirus\+ security 2020 +3 more +5 moreThe Trend Micro Security 2020 consumer family of products contains a vulnerability that could...7.1 High
- opensuse factory, suse linux enterprise server 15 sp1, trousers +1 more +3 moretrousers: Local privilege escalation from tss to root7.7 High
- apple ios, ipados, macos +2 more +4 moreA validation issue existed in the handling of symlinks. This issue was addressed with improved...5.5 Medium
- apple ios, macos, tvos +3 more +5 moreA validation issue existed in the handling of symlinks. This issue was addressed with improved...5.5 Medium
- yarnpkg yarnYarn Improper link resolution before file access (Link Following)7.8 High
- cli, npmjs npm, fedoraproject fedora +4 more +6 moreUnauthorized File Access in npm CLI before before version 6.13.37.7 High
- gemalto sentinel ldk license managerSafeNet Sentinel LDK License Manager, all versions prior to 7.101(only Microsoft Windows versions...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +10 more +12 moreAn elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly...7.8 High
- data\ \, debian linux, libdata-uuid-perl +2 morePerl module Data::UUID from CPAN version 1.219 vulnerable to symlink attacks5.5 Medium
- dell command\|configure, command configure (dcc) +1 moreDell Command Configure versions prior to 4.2.1 contain an uncontrolled search path vulnerability....7.1 High
- qnap qtsThis improper link resolution vulnerability allows remote attackers to access system files. To...9.8 Critical
- Show moreLoading…