CVE-2012-6114

2020-01-2814:38:36

redhat

www.cve.org

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

The git-changelog utility in git-extras 1.7.0 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/changelog or (2) /tmp/.git-effort.

CNA Affected

[
  {
    "product": "git-extras",
    "vendor": "git-extras",
    "versions": [
      {
        "status": "affected",
        "version": "1.7.0"
      }
    ]
  }
]