Code injection

In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall...

CVE-2020-28407: Improper Link Resolution Before File Access

In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall...

PT-2023-11767

Name of the Vulnerable Software and Affected Versions swtpm versions 0.4.1 and earlier swtpm versions 0.5.x before 0.5.1 Description A local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall. This issue allows an attacker to...