Privilege Escalation

🗓️ 16 Nov 2024 19:45:20Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 7 Views

Rclone software is vulnerable to Privilege Escalation via insecure symlink handling in specific flags.

Reporter	Title	Published	Views	Family All 50
AlpineLinux	CVE-2024-52522	15 Nov 202417:15	–	alpinelinux
Chainguard	CVE-2024-52522 vulnerabilities	15 Nov 202418:15	–	cgr
Circl	CVE-2024-52522	15 Nov 202417:17	–	circl
CNNVD	Rclone 安全漏洞	15 Nov 202400:00	–	cnnvd
CVE	CVE-2024-52522	15 Nov 202417:15	–	cve
Cvelist	CVE-2024-52522 Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata	15 Nov 202417:15	–	cvelist
Debian CVE	CVE-2024-52522	15 Nov 202417:15	–	debiancve
EUVD	EUVD-2024-3358	3 Oct 202520:07	–	euvd
Fedora	[SECURITY] Fedora 41 Update: golang-github-aws-smithy-1.22.1-1.fc41	14 Jan 202501:08	–	fedora
Fedora	[SECURITY] Fedora 41 Update: golang-github-ncw-swift-2-2.0.3-1.fc41	14 Jan 202501:08	–	fedora

Vulners

Node

rclone rcloneMatch1.66.0-r4go

AND

rclone rcloneMatch1.66.0-r2go

AND

rclone rcloneMatch1.66.0-r1go

AND

rclone rcloneMatch1.66.0-r3go

AND

alpinelinux alpine_linuxMatch3.20

rclone rcloneMatch1.60.1-r1go

AND

rclone rcloneMatch1.58.1-r1go

AND

rclone rcloneMatch1.56.2-r0go

AND

rclone rcloneMatch1.60.1-r0go

AND

rclone rcloneMatch1.61.1-r1go

AND

rclone rcloneMatch1.59.0-r2go

AND

rclone rcloneMatch1.66.0-r0go

AND

rclone rcloneMatch1.61.1-r0go

AND

rclone rcloneMatch1.57.0-r2go

AND

rclone rcloneMatch1.65.0-r0go

AND

rclone rcloneMatch1.65.2-r1go

AND

rclone rcloneMatch1.58.1-r0go

AND

rclone rcloneMatch1.68.1-r0go

AND

rclone rcloneMatch1.66.0-r2go

AND

rclone rcloneMatch1.53.3-r2go

AND

rclone rcloneMatch1.66.0-r3go

AND

rclone rcloneMatch1.53.3-r1go

AND

rclone rcloneMatch1.62.2-r1go

AND

rclone rcloneMatch1.62.2-r2go

AND

rclone rcloneMatch1.63.1-r0go

AND

rclone rcloneMatch1.66.0-r1go

AND

rclone rcloneMatch1.59.2-r2go

AND

rclone rcloneMatch1.63.1-r1go

AND

rclone rcloneMatch1.63.1-r2go

AND

rclone rcloneMatch1.68.0-r0go

AND

rclone rcloneMatch1.61.1-r2go

AND

rclone rcloneMatch1.63.1-r3go

AND

rclone rcloneMatch1.63.0-r0go

AND

rclone rcloneMatch1.57.0-r3go

AND

rclone rcloneMatch1.59.2-r0go

AND

rclone rcloneMatch1.51.0-r1go

AND

rclone rcloneMatch1.59.1-r0go

AND

rclone rcloneMatch1.58.0-r2go

AND

rclone rcloneMatch1.53.3-r4go

AND

rclone rcloneMatch1.60.0-r1go

AND

rclone rcloneMatch1.65.2-r0go

AND

rclone rcloneMatch1.51.0-r0go

AND

rclone rcloneMatch1.58.0-r1go

AND

rclone rcloneMatch1.58.0-r3go

AND

rclone rcloneMatch1.59.0-r0go

AND

rclone rcloneMatch1.57.0-r1go

AND

rclone rcloneMatch1.59.1-r1go

AND

rclone rcloneMatch1.64.2-r0go

AND

rclone rcloneMatch1.63.0-r1go

AND

rclone rcloneMatch1.59.0-r1go

AND

rclone rcloneMatch1.60.0-r0go

AND

rclone rcloneMatch1.67.0-r0go

AND

rclone rcloneMatch1.62.2-r0go

AND

rclone rcloneMatch1.67.0-r1go

AND

alpinelinux alpine_linuxMatchedge

rclone github.com/rclone/rcloneRangev1.59.0–1.59.0go

Source	Link
secdb	www.secdb.alpinelinux.org/v3.20/community.yaml
secdb	www.secdb.alpinelinux.org/edge/community.yaml
github	www.github.com/rclone/rclone/commit/01ccf204f42b4f68541b16843292439090a2dcf0
github	www.github.com/rclone/rclone/security/advisories/GHSA-hrxh-9w67-g4cv

15 Jan 2025 16:59Current

6.4Medium risk

Vulners AI Score6.4

CVSS 45.4

EPSS0.00028

SSVC