CVE-2022-35631 Filesystem race on temporary files

2022-07-2600:00:00

CWE-377

rapid7

www.cve.org

race attack

filesystem

macos

linux

symlink

velociraptor

0.0004 Low

EPSS

Percentile

12.6%

JSON

On MacOS and Linux, it may be possible to perform a symlink attack by replacing this predictable file name with a symlink to another file and have the Velociraptor client overwrite the other file. This issue was resolved in Velociraptor 0.6.5-2.

CNA Affected

[
  {
    "product": "Velociraptor",
    "vendor": "Rapid7",
    "versions": [
      {
        "lessThan": "0.6.5-2",
        "status": "affected",
        "version": "0.6.5-2",
        "versionType": "custom"
      }
    ]
  }
]