PT-2018-4120

CVE-2014-0243

·

Published

2018-07-19

·

Updated

2018-09-17

Description by

CVSS 2.0
2.1
Low
MetricsAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Check MK versions through 1.2.5i2p1
Description The issue allows local users to read arbitrary files via a symlink attack to a file in /var/lib/check mk agent/job.
Recommendations For Check MK versions through 1.2.5i2p1, update to a version that contains a fix for this issue to prevent local users from reading arbitrary files.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-59: Improper Link Resolution Before File Access (\'Link Following\')
Related identifiers
CVE-2014-0243
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com