Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2020-28407
HistoryNov 03, 2023 - 12:00 a.m.

CVE-2020-28407

2023-11-0300:00:00
mitre
github.com
2
swtpm
symlink attack
overwrite files
temporary file

AI Score

6.5

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall.

AI Score

6.5

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

total