Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:23450
HistoryApr 10, 2020 - 12:27 a.m.

Access Control Bypass

2020-04-1000:27:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

kernel is vulnerable to access control bypass. A missing check for files opened with O_APPEND in the sys_splice() could allow a local, unprivileged user to bypass the append-only file restrictions.

References

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

Related for VERACODE:23450