CVE-2018-17955

In yast2-multipath before version 4.1.1 a static temporary filename allows local attackers to overwrite files on systems without symlink…

microfocus·CWE-377·Published 2019-03-15

CVSS

—

EPSS

0.00

KEV

Exploits

cve.orgen

147 chars

In yast2-multipath before version 4.1.1 a static temporary filename allows local attackers to overwrite files on systems without symlink protection

NVDen

147 chars

In yast2-multipath before version 4.1.1 a static temporary filename allows local attackers to overwrite files on systems without symlink protection

NVDes

204 chars

En yast2-multipath, en versiones anteriores a la 4.1.1 un nombre de archivo estático temporal permite que los atacantes locales sobrescriban archivos en sistemas sin protección contra vínculos simbólicos.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	3.6	3.9	4.9	AV:L/AC:L/Au:N/C:N/I:P/A:P
3.0	Primary	NVD	5.5	1.8	3.6	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
3.0	Primary	cve.org	2.2	—	—	CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N
3.0	Primary	cve.org	2.2	—	—	CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N
3.0	Secondary	NVD	2.2	0.8	1.4	CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N