CWE-65: Windows Hard Link
The product, when opening a file or directory, does not sufficiently handle when the name is associated with a hard link to a target that is outside of the intended control sphere. This could allow an attacker to cause the product to operate on unauthorized files.
A kind of CWE-59 insecure temporary file.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +7 more +9 more Windows Compressed Folder Information Disclosure Vulnerability 6.5 Medium
- check point endpoint security client for windows, checkpoint endpoint security +1 more Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for... 7.8 High
- check point zonealarm point zonealarm, checkpoint zonealarm extreme security +1 more ZoneAlarm Firewall and Antivirus products before version 15.8.109.18436 allow an attacker who... 8.8 High
- broadcom ca client automation, ca technologies, broadcom company client automation +1 more An insecure file access vulnerability exists in CA Client Automation 14.0, 14.1, 14.2, and 14.3... 7.3 High
- check point endpoint security client for windows, checkpoint endpoint security +1 more A local attacker can create a hard-link between a file to which the Check Point Endpoint Security... 7.0 High
- check point endpoint security client for windows, check point zonealarm point endpoint security client for windows, point zonealarm +2 more +4 more A hard-link created from log file archive of Check Point ZoneAlarm up to 15.4.062 or Check Point... 7.8 High
- check point zonealarm point zonealarm, checkpoint zonealarm +1 more A hard-link created from the log file of Check Point ZoneAlarm up to 15.4.062 to any file on the... 7.1 High