PT-2011-5011

CVE-2011-4617

Published

2011-12-31

Updated

2022-05-17

CVSS 4.0

6.9

Medium

MetricsAV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions virtualenv versions prior to 1.5

Description The issue allows local users to overwrite arbitrary files via a symlink attack on a certain file in /tmp/.

Recommendations For versions prior to 1.5, update to version 1.5 or later to resolve the issue.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

GHSA-3JHC-WJQF-5F2C

PYSEC-2011-23

Found an issue in the description? Have something to add? Feel free to write us 👾