Lucene search
+L

1046 matches found

Debian CVE
Debian CVE
•added 2024/11/15 5:15 p.m.•60 views

CVE-2024-52522

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and --metadata in rclone while copying to local disk allows unprivileged users to indirectly modify ownership and permissions on symlink target...

5.4CVSS7.5AI score0.00241EPSS
SaveExploits0
Cvelist
Cvelist
•added 2024/11/15 5:15 p.m.•42 views

CVE-2024-52522 Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and --metadata in rclone while copying to local disk allows unprivileged users to indirectly modify ownership and permissions on symlink target...

5.4CVSS0.00241EPSS
SaveExploits0References2
CVE
CVE
•added 2024/11/15 5:15 p.m.•334 views

CVE-2024-52522

CVE-2024-52522 affects rclone. Insecure handling of symlinks when copying to local disks with --links and --metadata allows an unprivileged user to indirectly modify ownership/permissions on the symlink targets during a copy performed by a privileged process, potentially enabling privilege escala...

5.4CVSS7.5AI score0.00241EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/11/15 5:15 p.m.•15 views

CVE-2024-52522 Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and --metadata in rclone while copying to local disk allows unprivileged users to indirectly modify ownership and permissions on symlink target...

5.4CVSS7.4AI score0.00241EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/11/15 5:15 p.m.•13 views

CVE-2024-52522 Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and --metadata in rclone while copying to local disk allows unprivileged users to indirectly modify ownership and permissions on symlink target...

5.4CVSS7.5AI score0.00241EPSS
SaveExploits0References2
Mend
Mend
•added 2024/11/15 5:15 p.m.•7 views

CVE-2024-52522

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and --metadata in rclone while copying to local disk allows unprivileged users to indirectly modify ownership and permissions on symlink target...

8.2CVSS0.00241EPSS
SaveExploits0References6
AlpineLinux
AlpineLinux
•added 2024/11/15 5:15 p.m.•31 views

CVE-2024-52522

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and --metadata in rclone while copying to local disk allows unprivileged users to indirectly modify ownership and permissions on symlink target...

5.4CVSS7.5AI score0.00241EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/15 12:00 a.m.•6 views

CVE-2024-52522: Improper Link Resolution Before File Access

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and --metadata in rclone while copying to local disk allows unprivileged users to indirectly modify ownership and permissions on symlink target...

5.4CVSS6.8AI score0.00241EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/15 12:00 a.m.•18 views

Rclone security vulnerabilities

Rclone is a software from the Rclone team that synchronizes data asynchronously from cloud storage. The software supports Google Drive, Amazon Drive, S3, Dropbox, Backblaze B2, One Drive, Swift, Hubic, Cloudfiles, Google Cloud Storage, Yandex Files and other cloud storage. A security vulnerabilit...

5.4CVSS7.5AI score0.00241EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/11/15 12:00 a.m.•11 views

PT-2024-35354

Name of the Vulnerable Software and Affected Versions rclone versions prior to 1.68.2 Description The issue is related to insecure handling of symlinks with --links and --metadata in rclone while copying to local disk. This allows unprivileged users to indirectly modify ownership and permissions ...

5.5CVSS7.2AI score0.00241EPSS
SaveExploits0References33
OPENSUSE Linux
OPENSUSE Linux
•added 2024/11/15 12:00 a.m.•8 views

rclone-1.68.1-2.1 on GA media (moderate)

rclone-1.68.1-2.1 on GA media Announcement ID: openSUSE-SU-2024:14495-1 Rating: moderate Cross-References: CVE-2024-51744 CVSS scores: CVE-2024-51744 SUSE : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N CVE-2024-51744 SUSE : 2.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N...

3.1CVSS6.5AI score0.00541EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2024/11/14 12:00 a.m.•14 views

Fedora 41 : rclone (2024-3ef0d3c37d)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-3ef0d3c37d advisory. Automatic update for rclone-1.67.0-1.fc41. Changelog Fri Aug 9 2024 Mikel Olasagasti Uranga - 1.67.0-1 - Update to 1.67.0 - Closes rhbz2251762...

5.9CVSS7.2AI score0.93547EPSS
SaveExploits4References3
osv_opensuse
osv_opensuse
•added 2024/11/14 12:00 a.m.•7 views

OPENSUSE-SU-2024:14495-1 rclone-1.68.1-2.1 on GA media

These are all security issues fixed in the rclone-1.68.1-2.1 package on the GA media of openSUSE Tumbleweed...

3.1CVSS4.8AI score0.00541EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2024/09/10 12:00 a.m.•24 views

Fedora: Security Advisory (FEDORA-2023-2f0957b051)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7AI score0.06077EPSS
SaveExploits0References9
OpenVAS
OpenVAS
•added 2024/09/10 12:00 a.m.•27 views

Fedora: Security Advisory (FEDORA-2023-ff1e594f3d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.8AI score0.00851EPSS
SaveExploits0References5
osv_go
osv_go
•added 2024/08/21 3:29 p.m.•21 views

GO-2022-0878 Use of Cryptographically Weak Pseudo-Random Number Generator in Rclone in github.com/rclone/rclone

Use of Cryptographically Weak Pseudo-Random Number Generator in Rclone in github.com/rclone/rclone...

7.5CVSS7.4AI score0.01364EPSS
SaveExploits1References5
Akamai Blog
Akamai Blog
•added 2024/08/08 10:20 a.m.•14 views

Cloning Content to Linode Object Storage with RClone

...

7AI score
SaveExploits0
osv_opensuse
osv_opensuse
•added 2024/06/17 12:00 a.m.•13 views

OPENSUSE-SU-2024:14053-1 rclone-1.67.0-1.1 on GA media

These are all security issues fixed in the rclone-1.67.0-1.1 package on the GA media of openSUSE Tumbleweed...

7.5CVSS8.4AI score0.91969EPSS
SaveExploits1References1
osv_opensuse
osv_opensuse
•added 2024/06/15 12:00 a.m.•12 views

OPENSUSE-SU-2024:13569-1 rclone-1.65.1-1.1 on GA media

These are all security issues fixed in the rclone-1.65.1-1.1 package on the GA media of openSUSE Tumbleweed...

5.9CVSS6.9AI score0.93547EPSS
SaveExploits5References2
osv_opensuse
osv_opensuse
•added 2024/06/15 12:00 a.m.•16 views

OPENSUSE-SU-2024:13781-1 rclone-1.66.0-1.1 on GA media

These are all security issues fixed in the rclone-1.66.0-1.1 package on the GA media of openSUSE Tumbleweed...

7.5CVSS7.4AI score0.01262EPSS
SaveExploits0References1
Rows per page
Query Builder