Remote file inclusion

2022-07-2917:15:00

PRIOn knowledge base

www.prio-n.com

macos

linux

symlink attack

velociraptor 0.6.5-2

nvd

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

On MacOS and Linux, it may be possible to perform a symlink attack by replacing this predictable file name with a symlink to another file and have the Velociraptor client overwrite the other file. This issue was resolved in Velociraptor 0.6.5-2.

CPENameOperatorVersion
velociraptoreq< 0.6.5-2

CPE	Name	Operator	Version
	velociraptor	eq	< 0.6.5-2

References

www.rapid7.com/blog/post/2022/07/26/cve-2022-35629-35632-velociraptor-multiple-vulnerabilities-fixed/