CVSS 3.0
7.8 highCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2015-7358
High (7.8). EPSS 1.2% chance of exploitation in the next 30 days.
The IsDriveLetterAvailable method in Driver/Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed, when running on Windows, does not properly validate drive letter symbolic links, which allows local users to mount an encrypted volume over an existing drive letter and gain privileges via an entry in the /GLOBAL?? directory.
Severity
- EPSS
- 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ciphershed:ciphershed
- idrix:veracrypt
- truecrypt:truecrypt
References
- http://packetstormsecurity.com/files/133878/Truecrypt-7-Derived-Code-Windows-Drive-Letter-Symbolic-Link-Creation-Privilege-Escalation.html
- http://www.openwall.com/lists/oss-security/2015/09/22/7
- http://www.openwall.com/lists/oss-security/2015/09/24/3
- https://code.google.com/p/google-security-research/issues/detail?id=538
- https://veracrypt.codeplex.com/wikipage?title=Release%20Notes