Lucene search
Veracode Vulnerability DatabaseVERACODE:12596HistoryJan 15, 2019 - 9:19 a.m.
Symbolic Link Attack
2019-01-1509:19:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.0004 Low
EPSS
Percentile
5.1%
instack-undercloud is vulnerable to symbolic link attacks. The library uses a hardcoded temporary files during pre-installation, allowing a malicious user to conduct a symbolic link attack and overwrite arbitrary files.
References
www.securityfocus.com/bid/100407
access.redhat.com/errata/RHSA-2017:2557
access.redhat.com/errata/RHSA-2017:2649
access.redhat.com/errata/RHSA-2017:2687
access.redhat.com/errata/RHSA-2017:2693
access.redhat.com/errata/RHSA-2017:2726
access.redhat.com/security/cve/CVE-2017-7549
access.redhat.com/security/updates/classification/#moderate
bugzilla.redhat.com/show_bug.cgi?id=1465616
bugzilla.redhat.com/show_bug.cgi?id=1477403
bugzilla.redhat.com/show_bug.cgi?id=1479841
Related
redhat
redhat
(RHSA-2017:2687) Moderate: instack-undercloud security update
2017-09-12 16:18:17
(RHSA-2017:2649) Moderate: instack-undercloud security, bug fix, and enhancement update
2017-09-06 16:37:27
(RHSA-2017:2693) Moderate: instack-undercloud security update
2017-09-12 16:45:06
cvelist
cvelist
CVE-2017-7549
2017-09-21 20:00:00
nvd
nvd
CVE-2017-7549
2017-09-21 21:29:00
github
github
instack-undercloud vulnerable to symlink attack on tmp files
2022-05-13 01:07:33
cve
cve
CVE-2017-7549
2017-09-21 21:29:00
redhatcve
redhatcve
CVE-2017-7549
2019-10-05 14:05:43
veracode
veracode
Symbolic Link Attack
2017-09-07 02:45:58
osv
osv
instack-undercloud vulnerable to symlink attack on tmp files
2022-05-13 01:07:33
CVE-2017-7549
2017-09-21 21:29:00
nessus
nessus
RHEL 7 : instack-undercloud (RHSA-2017:2649)
2024-04-24 00:00:00
prion
prion
Design/Logic Flaw
2017-09-21 21:29:00