Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3wmf-q566-h69q

Опубликовано: 30 июл. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

On MacOS and Linux, it may be possible to perform a symlink attack by replacing this predictable file name with a symlink to another file and have the Velociraptor client overwrite the other file. This issue was resolved in Velociraptor 0.6.5-2.

On MacOS and Linux, it may be possible to perform a symlink attack by replacing this predictable file name with a symlink to another file and have the Velociraptor client overwrite the other file. This issue was resolved in Velociraptor 0.6.5-2.

EPSS

Процентиль: 29%
0.00108
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-59

Связанные уязвимости

CVSS3: 5.5
nvd
больше 3 лет назад

On MacOS and Linux, it may be possible to perform a symlink attack by replacing this predictable file name with a symlink to another file and have the Velociraptor client overwrite the other file. This issue was resolved in Velociraptor 0.6.5-2.

CVSS3: 5.5
fstec
больше 3 лет назад

Уязвимость программного средства аналитики инцидентов информационной безопасности Velociraptor, позволяющая нарушителю перезаписать произвольный файл

EPSS

Процентиль: 29%
0.00108
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-59