CVE-2022-35631 Filesystem race on temporary files

2022-07-2917:00:46

CWE-377

rapid7

www.cve.org

race attack

filesystem

macos

linux

symlink

velociraptor

EPSS

Percentile

12.6%

JSON

On MacOS and Linux, it may be possible to perform a symlink attack by replacing this predictable file name with a symlink to another file and have the Velociraptor client overwrite the other file. This issue was resolved in Velociraptor 0.6.5-2.

CNA Affected

[
  {
    "product": "Velociraptor",
    "vendor": "Rapid7",
    "versions": [
      {
        "lessThan": "0.6.5-2",
        "status": "affected",
        "version": "0.6.5-2",
        "versionType": "custom"
      }
    ]
  }
]

References

www.rapid7.com/blog/post/2022/07/26/cve-2022-35629-35632-velociraptor-multiple-vulnerabilities-fixed/

EPSS

Percentile

12.6%

JSON

Related for CVELIST:CVE-2022-35631