2 matches found
Hardcoded credentials
The errorExitIfAttackViaString function in Tunnelblick 3.3beta20 and earlier allows local users to delete arbitrary files by constructing a 1 symlink or 2 hard link, a different vulnerability than CVE-2012-3485...
1.2CVSS6.6AI score0.03776EPSS
SaveExploits7References3Affected Software1
CVE-2012-4676: Improper Link Resolution Before File Access
The errorExitIfAttackViaString function in Tunnelblick 3.3beta20 and earlier allows local users to delete arbitrary files by constructing a 1 symlink or 2 hard link, a different vulnerability than CVE-2012-3485...
1.2CVSS6AI score0.00186EPSS
SaveExploits1References2
20