CVE-2017-15111

Description

keycloak-httpd-client-install versions before 0.8 insecurely creates temporary file allowing local attackers to overwrite other files via symbolic link.

Risk Information

Base Score

5.5

MODERATE

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS Score

Exploitation Probability

0.055

Associated Vulnerability

Vulnerability	OS Platform
Keycloak-httpd-client-install update (ELSA-2019-2137) keycloak-httpd-client-install-0.8-1.el7.noarch.rpm	Linux
Python2-keycloak-httpd-client-install update (ELSA-2019-2137) python2-keycloak-httpd-client-install-0.8-1.el7.noarch.rpm	Linux
keycloak-httpd-client-install Security Update (ALAS-2019-1324) keycloak-httpd-client-install-0.8-1.amzn2.noarch.rpm	Linux
keycloak-httpd-client-install Security Update (ALAS-2019-1324) python2-keycloak-httpd-client-install-0.8-1.amzn2.noarch.rpm	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234