CWE-59: insecure temporary file
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
Also known as Improper Link Resolution Before File Access, Zip Slip, Link Following.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- apple macosThis issue was addressed with improved validation of symlinks. This issue is fixed in macOS...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreThis issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.1 and...5.5 Medium
- apple ipados, tvos, visionos +2 more +4 moreThis issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.1 and...7.1 High
- sonicwall connect tunnelThe Improper link resolution before file access ('Link Following') vulnerability in SonicWall...7.8 High
- sonicwall connect tunnelThe Improper link resolution before file access ('Link Following') vulnerability in SonicWall...5.5 Medium
- microsoft visual studio, visual studio 2015 update 3, visual studio 2017 version 15.9 (includes 15.0 - 15.8) +8 more +10 moreVisual Studio Collector Service Denial of Service Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +21 more +23 moreWindows Storage Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreWindows Common Log File System Driver Elevation of Privilege Vulnerability7.8 High
- microsoft azure monitor, azure monitor agent +1 moreAzure Monitor Agent Elevation of Privilege Vulnerability7.1 High
- hp, inc. hp hotkey support, hp elite dragonfly max firmware +1 moreHP Hotkey Support – Escalation of Privilege8.8 High
- containers common, red hat enterprise linux 10, enterprise linux 8 +10 more +12 morePodman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library5.4 Medium
- papercut mf, ng, ng, papercut mf +2 moreArbitrary File Deletion in PaperCut NG/MF Web Print Hot folder7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +12 more +14 morePcp: pmpost symlink attack allows escalating pcp to root user4.4 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moreSquashfs: sanity check symbolic link size7.8 High
- apple macosThis issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia...8.8 High
- apple macosThis issue was addressed with improved validation of symlinks. This issue is fixed in macOS...5.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreThis issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18 and...5.5 Medium
- microsoft azure network watcher vm extension, azure network watcher agent +1 moreAzure Network Watcher VM Agent Elevation of Privilege Vulnerability7.3 High
- microsoft azure network watcher vm extension, azure network watcher agent +1 moreAzure Network Watcher VM Agent Elevation of Privilege Vulnerability7.1 High
- dell powerscale onefsDell PowerScale OneFS versions 8.2.2.x through 9.8.0.1 contains a UNIX symbolic link (symlink)...6.3 Medium
- dell alienware m15 r6 firmware, alienware m15 r7 firmware, alienware m16 r1 firmware +344 more +346 moreDell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability...6.7 Medium
- vipre advanced securityVIPRE Advanced Security PMAgent Link Following Local Privilege Escalation Vulnerability7.8 High
- microsoft azure connected machine agentAzure Connected Machine Agent Elevation of Privilege Vulnerability7.8 High
- microsoft officeplusMicrosoft OfficePlus Elevation of Privilege Vulnerability7.8 High
- comodo internet security pro, internet security +1 moreComodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability7.8 High
- comodo internet security pro, internet security +1 moreComodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability7.8 High
- comodo internet security pro, internet security +1 moreComodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability7.8 High
- comodo firewallComodo Firewall Link Following Local Privilege Escalation Vulnerability7.8 High
- microsoft azure network watcher vm extension, azure network watcher agent +1 moreAzure Network Watcher VM Extension Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows Image Acquisition Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreMicrosoft Windows Server Backup Elevation of Privilege Vulnerability6.7 Medium
- microsoft .net, .net framework, .net 6.0 +15 more +17 more.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability7.3 High
- hp poly plantronics hub, plantronics hub, poly plantronics hub +2 morePoly Plantronics Hub Link Following Local Privilege Escalation Vulnerability7.8 High
- microsoft azure monitor, azure monitor agent +1 moreAzure Monitor Agent Elevation of Privilege Vulnerability7.1 High
- microsoft azure file syncMicrosoft Azure File Sync Elevation of Privilege Vulnerability4.4 Medium
- microsoft office, 365 apps, 365 apps for enterprise +4 more +6 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +29 more +31 moreWindows Storage Elevation of Privilege Vulnerability7.3 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +24 more +26 moreWindows Themes Denial of Service Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreWindows Container Manager Service Elevation of Privilege Vulnerability6.8 Medium
- debian linux, openprinting cups +1 moreCupsd Listen arbitrary chmod 01407774.4 Medium
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 moreA link following vulnerability in the Trend Micro Apex One and Apex One as a Service Damage...6.1 Medium
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 moreA security agent link following vulnerability in Trend Micro Apex One could allow a local...7.8 High
- apple macosThis issue was addressed with improved validation of symlinks. This issue is fixed in macOS...6.3 Medium
- avast antivirusElevation of Privelage via symlinked file in Avast Antivirus7.3 High
- gnu nano, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreNano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file6.7 Medium
- qdrant, qdrant qdrant/qdrant +1 moreArbitrary File Read and Write during Snapshot Recovery in qdrant/qdrant9.8 Critical
- avira primeAvira Prime Link Following Local Privilege Escalation Vulnerability7.8 High
- withsecure elements, elements endpoint protection, client security +2 more +4 moreWithSecure Elements Endpoint Protection Link Following Local Privilege Escalation Vulnerability7.3 High
- microsoft azure monitor, azure monitor agent +1 moreAzure Monitor Agent Elevation of Privilege Vulnerability7.8 High
- gitGit's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution9.1 Critical
- Show moreLoading…