Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-26hh-jgf5-3gmg

Опубликовано: 25 июн. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.7

Описание

Thales Safenet Authentication Client (SAC) for Linux and Windows through 10.7.7 creates insecure temporary hid and lock files allowing a local attacker, through a symlink attack, to overwrite arbitrary files, and potentially achieve arbitrary command execution with high privileges.

Thales Safenet Authentication Client (SAC) for Linux and Windows through 10.7.7 creates insecure temporary hid and lock files allowing a local attacker, through a symlink attack, to overwrite arbitrary files, and potentially achieve arbitrary command execution with high privileges.

EPSS

Процентиль: 84%
0.02336
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-59

Связанные уязвимости

CVSS3: 6.7
nvd
больше 3 лет назад

Thales Safenet Authentication Client (SAC) for Linux and Windows through 10.7.7 creates insecure temporary hid and lock files allowing a local attacker, through a symlink attack, to overwrite arbitrary files, and potentially achieve arbitrary command execution with high privileges.

EPSS

Процентиль: 84%
0.02336
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-59