Описание
keycloak-httpd-client-install versions before 0.8 insecurely creates temporary file allowing local attackers to overwrite other files via symbolic link.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| keycloak | itp | package |
EPSS
Процентиль: 31%
0.00386
Низкий
Связанные уязвимости
CVSS3: 3.9
redhat
больше 8 лет назад
keycloak-httpd-client-install versions before 0.8 insecurely creates temporary file allowing local attackers to overwrite other files via symbolic link.
CVSS3: 5.5
nvd
больше 8 лет назад
keycloak-httpd-client-install versions before 0.8 insecurely creates temporary file allowing local attackers to overwrite other files via symbolic link.
CVSS3: 5.5
github
около 4 лет назад
keycloak-httpd-client-install symlink attack vulnerability
oracle-oval
почти 7 лет назад
ELSA-2019-2137: keycloak-httpd-client-install security, bug fix, and enhancement update (LOW)
EPSS
Процентиль: 31%
0.00386
Низкий