CDRDAO 1.1.4 and 1.1.5 allows local users to overwrite arbitrary files via a symlink attack on the $HOME/.cdrdao configuration file.
6.4AI Score
0.0004EPSS
CDRDAO 1.1.4 and 1.1.5 allows local users to read arbitrary files via the show-data command.
6.4AI Score
0.0004EPSS