Lucene search
HistoryJul 29, 2022 - 5:15 p.m.
CVE-2022-35631
symlink
attack
macos
linux
velociraptor
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
0.0004 Low
EPSS
Percentile
12.6%
On MacOS and Linux, it may be possible to perform a symlink attack by replacing this predictable file name with a symlink to another file and have the Velociraptor client overwrite the other file. This issue was resolved in Velociraptor 0.6.5-2.
Affected configurations
Node
rapid7velociraptorRange<0.6.5-2
applemacosMatch-
ORlinuxlinux_kernelMatch-
Related
cvelist
cvelist
CVE-2022-35631 Filesystem race on temporary files
2022-07-26 00:00:00
cve
cve
CVE-2022-35631
2022-07-29 17:15:09
prion
prion
Remote file inclusion
2022-07-29 17:15:00
rapid7blog
rapid7blog
CVE-2022-35629..35632 Velociraptor Multiple Vulnerabilities (FIXED)
2022-07-26 17:15:00
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
0.0004 Low
EPSS
Percentile
12.6%
Related for NVD:CVE-2022-35631