CVSS 3.0
5.5 mediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NCVE-2016-9595
Medium (5.5). EPSS 0.4% chance of exploitation in the next 30 days.
A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 34% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-59, CWE-377
- Published
- Modified
- Record from
- the NVD, synced
Affected
- redhat:satellite
- redhat:satellite_capsule
- theforeman:katello