Описание
The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augsave file in a backup save action, a different vector than CVE-2012-0786.
Отчет
Red Hat believes that the flaw described by this CVE never affected augeas and therefore we consider this CVE assignment as invalid. For further details, refer to: https://bugzilla.redhat.com/show_bug.cgi?id=1034243#c1
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | augeas | Not affected | ||
| Red Hat Enterprise Linux 7 | augeas | Not affected | ||
| Red Hat OpenStack Platform 3 | augeas | Not affected | ||
| Red Hat OpenStack Platform 4 | augeas | Not affected | ||
| Red Hat Storage 2 | augeas | Not affected |
Показывать по
Дополнительная информация
EPSS
3.3 Low
CVSS2
Связанные уязвимости
The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augsave file in a backup save action, a different vector than CVE-2012-0786.
The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augsave file in a backup save action, a different vector than CVE-2012-0786.
The transform_save function in transform.c in Augeas before 1.0.0 allo ...
The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augsave file in a backup save action, a different vector than CVE-2012-0786.
EPSS
3.3 Low
CVSS2