Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:5783
HistoryFeb 02, 2018 - 5:01 a.m.

Symlink Privilege Escalation

2018-02-0205:01:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

EPSS

0.001

Percentile

36.3%

spring-boot-loader-tools is vulnerable to symlink privilege escalation attacks. The run_user can overwrite and take over ownership of any file on the system by using a symlink attack. The application must be installed as a service and the run_user must have shell access in order to successfully complete an attack.

EPSS

0.001

Percentile

36.3%