vulnwire
7.3high

CVE-2016-9595

A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files.

Published 8 y ago · modified 4 mo ago · JSON

CVSS
7.3
v3.0 · CNA
CISA KEV
No
not known exploited
EPSS
0.4%
percentile 35%
Public exploits
0
none known

A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files.

Exploit prediction (EPSS)

0.40% probability of exploitation in the next 30 days, higher than 35% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
CNA3.07.3CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CNA3.07.3CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
NVD3.05.5CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
NVD2.03.6AV:L/AC:L/Au:N/C:N/I:P/A:P

Affected products

  • Foreman katello-debug

Classification

Weakness
  • CWE-377 DEPRECATED: Insecure Temporary File
  • CWE-59 Improper Link Resolution Before File Access

References

  • access.redhat.com /errata/RHSA-2018:0336 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • bugzilla.redhat.com /show_bug.cgi?id=CVE-2016-9595 · x_refsource_CONFIRM, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.