PT-2008-2998 · Axyl · Axyl
CVSS v2.0
6.9
Média
| Vetor | AV:L/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
axyl version 2.1.7
Description
The issue allows local users to overwrite arbitrary files via a symlink attack on the axyl.conf temporary file, which is created by the prerm script.
Recommendations
For axyl version 2.1.7, consider restricting access to the prerm script to prevent exploitation until a patch is available. As a temporary workaround, avoid using the prerm script until the issue is resolved.
Correção
Link Following
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Axyl