PT-2019-6102
CVE-2019-3699
·
تاريخ النشر
2019-11-21
·
تاريخ التحديث
2021-09-14
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
privoxy versions 3.0.28-lp151.1.1 and prior versions
privoxy versions 3.0.28-2.1 and prior versions
Description
The issue is related to a UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of privoxy on openSUSE Leap 15.1 and Factory. This vulnerability allows local attackers to escalate from user privoxy to root. The exploitation of this vulnerability may allow an attacker to gain elevated privileges.
Recommendations
For privoxy version 3.0.28-lp151.1.1 and prior versions, update to a version that fixes the Symlink Following vulnerability.
For privoxy version 3.0.28-2.1 and prior versions, update to a version that fixes the Symlink Following vulnerability.
As a temporary workaround, consider restricting access to the vulnerable privoxy packaging to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾