CVE-2023-20008: Improper Link Resolution Before File Access

A vulnerability in the CLI of Cisco TelePresence CE and RoomOS Software could allow an authenticated, local attacker to overwrite arbitrary files on the local system of an affected device. This vulnerability is due to improper access controls on files that are in the local file system. An attacke...

CVE-2022-45440: Improper Link Resolution Before File Access

A vulnerability exists in the FTP server of the Zyxel AX7501-B0 firmware prior to V5.17ABPC.3C0, which processes symbolic links on external storage media. A local authenticated attacker with administrator privileges could abuse this vulnerability to access the root file system by creating a...

CVE-2023-21725: Improper Link Resolution Before File Access

Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability...

CVE-2022-38482: Improper Link Resolution Before File Access

A link-manipulation issue was discovered in Mega HOPEX 15.2.0.6110 before V5CP4...

CVE-2023-21760: Improper Link Resolution Before File Access

Windows Print Spooler Elevation of Privilege Vulnerability...

CVE-2023-21542: Improper Link Resolution Before File Access

Windows Installer Elevation of Privilege Vulnerability...

CVE-2023-21678: Improper Link Resolution Before File Access

Windows Print Spooler Elevation of Privilege Vulnerability...

The vulnerability of the Group Policy Preference Client module of the Windows operating system allows attackers to increase their privileges within the system.

The vulnerability of the Group Policy Preference Client module for the Windows operating system is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow an attacker to increase their privileges within the system using a specially created...

Debian dla-3202 : bsdcpio - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3202 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3202-1 [email protected]...

Git Source Code Management Code Execution (CVE-2021-21300)

An improper link resolution exists in the checkout mechanism of Git Source Code Management git-scm by Git. An out-of-order checkout triggered by a delayed checkout or checkout-index may result in an improper validation of a file resource type prior to performing a file write operation. A remote...

CVE-2022-31256

CVE-2022-31256 is a local privilege-escalation issue in the openSUSE/openSUSE Factory sendmail workflow. Affected component: a script invoked by the sendmail systemd service. Root cause: improper link resolution before file access ("link following") in that script allows a local attacker to escal...

CVE-2022-31256

A Improper Link Resolution Before File Access 'Link Following' vulnerability in a script called by the sendmail systemd service of openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: SUSE openSUSE Factory sendmail versions prior to 8.17.1-1.1...

CVE-2022-31256 sendmail: mail to root privilege escalation via sm-client.pre script

A Improper Link Resolution Before File Access 'Link Following' vulnerability in a script called by the sendmail systemd service of openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: SUSE openSUSE Factory sendmail versions prior to 8.17.1-1.1...

PT-2022-20643 · Sendmail +1 · Sendmail +1

Name of the Vulnerable Software and Affected Versions: openSUSE Factory sendmail versions prior to 8.17.1-1.1 Description: A local attacker can exploit an Improper Link Resolution Before File Access issue, also known as 'Link Following', in a script used by the sendmail systemd service to escalat...

The vulnerability of the file-sharing software for disconnected desktops, Warpinator, arises from an improper definition of the link before accessing files. This allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the file-sharing software between remote desktops in Warpinator relates to the improper handling of links before accessing files. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Huawei EulerOS: Security Advisory for libarchive (EulerOS-SA-2022-2568)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-42725: Improper Link Resolution Before File Access

Warpinator through 1.2.14 allows access outside of an intended directory, as demonstrated by symbolic directory links...

EulerOS Virtualization 3.0.6.0 : libarchive (EulerOS-SA-2022-2568)

According to the versions of the libarchive packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An improper link resolution flaw while extracting an archive can lead to changing the access control list ACL of the target o...

CVE-2022-40143: Improper Link Resolution Before File Access

A link following local privilege escalation vulnerability in Trend Micro Apex One and Trend Micro Apex One as a Service servers could allow a local attacker to abuse an insecure directory that could allow a low-privileged user to run arbitrary code with elevated privileges. Please note: an attack...

CVE-2022-0029 Cortex XDR Agent: Improper Link Resolution Vulnerability When Generating a Tech Support File

An improper link resolution vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local attacker to read files on the system with elevated privileges when generating a tech support file...