CVE-2021-35938

Name of the Vulnerable Software and Affected Versions RPM (affected versions not specified)

Description A symbolic link issue was found in rpm, occurring when rpm sets the desired permissions and credentials after installing a file. This flaw could be exploited by a local unprivileged user to exchange the original file with a symbolic link to a security-critical file, potentially escalating their privileges on the system. The highest threat from this issue is to data confidentiality and integrity as well as system availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.