3.6
CVE-2013-0164
- EPSS 0.37%
- Veröffentlicht 24.02.2013 22:55:01
- Zuletzt bearbeitet 29.04.2026 01:13:23
- Quelle secalert@redhat.com
- CVE-Watchlists
- Unerledigt
LoginThe lockwrap function in port-proxy/bin/openshift-port-proxy-cfg in Red Hat OpenShift Origin before 1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Redhat ≫ Openshift Origin Version1.0.5
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.37% | 0.282 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 3.6 | 3.9 | 4.9 |
AV:L/AC:L/Au:N/C:N/I:P/A:P
|
http://rhn.redhat.com/errata/RHSA-2013-0220.html
https://bugzilla.redhat.com/show_bug.cgi?id=893307
https://github.com/openshift/origin-server/commit/524465f70a32d0eb6bf047e6a05c76c22d52bfa2
https://github.com/openshift/origin-server/pull/1136