PT-2019-15778 · Shibboleth+2 · Shibboleth Service Provider+2
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Shibboleth Service Provider (SP) versions 3.x before 3.1.0
Description
The issue allows a user to escalate to root by pointing symlinks to sensitive files, such as /etc/shadow, due to a spec file that calls chown on files in a directory controlled by the service user after installation.
Recommendations
For Shibboleth Service Provider (SP) versions 3.x before 3.1.0, update to version 3.1.0 or later to resolve the issue.
Exploit
Fix
Link Following
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Shibboleth Service Provider
Suse