Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2020-28407

Опубликовано: 03 нояб. 2023
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 7.1

Описание

In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall.

РелизСтатусПримечание
devel

not-affected

0.6.3-0ubuntu3
jammy

not-affected

0.6.3-0ubuntu3
trusty

DNE

upstream

needs-triage

xenial

DNE

Показывать по

Ссылки на источники

EPSS

Процентиль: 20%
0.00279
Низкий

7.1 High

CVSS3

Связанные уязвимости

CVSS3: 7.3
redhat
почти 6 лет назад

In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall.

CVSS3: 7.1
nvd
почти 3 года назад

In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall.

CVSS3: 7.1
debian
почти 3 года назад

In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be ...

CVSS3: 7.1
github
почти 3 года назад

In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall.

EPSS

Процентиль: 20%
0.00279
Низкий

7.1 High

CVSS3