Hardcoded credentials

2018-02-1420:29:00

PRIOn knowledge base

www.prio-n.com

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

OpenRC opentmpfiles through 0.1.3, when the fs.protected_hardlinks sysctl is turned off, allows local users to obtain ownership of arbitrary files by creating a hard link inside a directory on which “chown -R” will be run.

CPENameOperatorVersion
opentmpfilesle0.1.3

CPE	Name	Operator	Version
	opentmpfiles	le	0.1.3

References

github.com/OpenRC/opentmpfiles/issues/3