CVE-2016-9595

2018-07-2718:29:00

Google

osv.dev

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files.

CPENameOperatorVersion
katelloeqkatello-1.4.3-1
katelloeqkatello-1.4.4-1
katelloeqrubygem-katello-2.2.0-2
katelloeqrubygem-katello-2.4.0-1
katelloeqrubygem-katello-1.5.0-12
katelloeqkatello-1.4.2-1
katelloeqkatello-1.5.1-1
katelloeqkatello-2.0.0-0
katelloeqkatello-1.5.0-14
katelloeqrubygem-katello-2.0.0-1

Name	Operator	Version
katello	eq	katello-1.4.3-1
katello	eq	katello-1.4.4-1
katello	eq	rubygem-katello-2.2.0-2
katello	eq	rubygem-katello-2.4.0-1
katello	eq	rubygem-katello-1.5.0-12
katello	eq	katello-1.4.2-1
katello	eq	katello-1.5.1-1
katello	eq	katello-2.0.0-0
katello	eq	katello-1.5.0-14
katello	eq	rubygem-katello-2.0.0-1