cve.bz

CWE-59: Improper Link Resolution Before File Access (Link Following), page 17

Filter

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

What the weakness is: CWE-59 at MITRE

Ask an AI about CWE-59

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-59: Improper Link Resolution Before File Access and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/59.html and https://cve.bz/cve/cwe/59?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.5CVE-2023-28869EPSS 0.8%

    Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers read the contents of arbitrary files on the operating system by creating a symbolic link.

  2. 8.1CVE-2023-28868EPSS 0.9%

    Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers to delete arbitrary files on the operating system by creating a symbolic link.

  3. 7.3CVE-2023-39246EPSS 0.2%

    Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server version prior to 11.8.1 contain an Insecure Operation on Windows Junction Vulnerability during installation. A local malicious user could potenti…

  4. 7.8CVE-2023-43590EPSS 0.2%

    Link following in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation of privilege via local access.

  5. 7.8CVE-2023-36705EPSS 0.7%

    Windows Installer Elevation of Privilege Vulnerability

  6. 7.1CVE-2023-36399EPSS 8.3%

    Windows Storage Elevation of Privilege Vulnerability

  7. 7.0CVE-2023-36394EPSS 6.7%

    Windows Search Service Elevation of Privilege Vulnerability

  8. 7.8CVE-2023-36047EPSS 1.1%

    Windows Authentication Elevation of Privilege Vulnerability

  9. 7.1CVE-2023-36046EPSS 0.7%

    Windows Authentication Denial of Service Vulnerability

  10. 8.8CVE-2023-6069EPSS 0.8%

    Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0.

  11. 7.1CVE-2020-28407EPSS 0.3%

    In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall.

  12. 7.8CVE-2023-5834EPSS 0.2%

    HashiCorp Vagrant's Windows installer targeted a custom location with a non-protected path that could be junctioned, introducing potential for unauthorized file system writes. Fixed in Vagrant 2.4.0.

  13. 7.5CVE-2018-17559EPSS 1.2%

    Due to incorrect access control, unauthenticated remote attackers can view the /video.mjpg video stream of certain ABUS TVIP cameras.

  14. 7.5CVE-2023-42844EPSS 1.7%

    This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. A website may be able to access sensitive user data when resolving symlinks.

  15. 6.5CVE-2023-46655EPSS 1.4%

    Jenkins CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the directory from which artifacts are published during the 'CloudBees CD - Publish Artifact' post-build step, allowing attackers able to configu…

  16. 8.1CVE-2023-46654EPSS 1.6%

    Jenkins CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the expected directory during the cleanup process of the 'CloudBees CD - Publish Artifact' post-build step, allowing attackers able to configure …

  17. 7.3CVE-2023-28797EPSS 0.2%

    Zscaler Client Connector for Windows before 4.1 writes/deletes a configuration file inside specific folders on the disk. A malicious user can replace the folder and execute code as a privileged user.

  18. 7.8CVE-2023-36737EPSS 0.5%

    Azure Network Watcher VM Agent Elevation of Privilege Vulnerability

  19. 7.8CVE-2023-36723EPSS 2.0%

    Windows Container Manager Service Elevation of Privilege Vulnerability

  20. 7.8CVE-2023-36711EPSS 0.6%

    Windows Runtime C++ Template Library Elevation of Privilege Vulnerability

  21. 7.0CVE-2023-36568EPSS 0.4%

    Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

  22. 8.4CVE-2023-45159EPSS 0.2%

    1E Client installer can perform arbitrary file deletion on protected files.   A non-privileged user could provide a symbolic link or Windows junction to point to a protected directory in the installer that the 1E Client would then clear o…

  23. 5.5CVE-2023-41968EPSS 0.4%

    This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13.6, tvOS 17, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to read arbitrary files.

  24. 7.8CVE-2023-32182EPSS 0.3%

    A Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux Enterprise Desktop 15 SP5 postfix, SUSE SUSE Linux Enterprise High Performance Computing 15 SP5 postfix, SUSE openSUSE Leap 15.5 postfix.This…

  25. 9.8CVE-2023-36758EPSS 1.3%

    Visual Studio Elevation of Privilege Vulnerability

  26. 8.8CVE-2023-4759EPSS 2.2%

    Arbitrary File Overwrite in Eclipse JGit <= 6.6.0 In Eclipse JGit, all versions <= 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when …

  27. 7.8CVE-2023-32163EPSS 0.4%

    Wacom Drivers for Windows Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Wacom Drivers for Windows. An attacker must first obtain the a…

  28. 7.8CVE-2022-46869EPSS 0.2%

    Local privilege escalation during installation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40278, Acronis True Image OEM (Windows) before build 42575.

  29. 7.5CVE-2023-34723ExploitEPSS 5.4%

    An issue was discovered in TechView LA-5570 Wireless Gateway 1.0.19_T53, allows attackers to gain sensitive information via /config/system.conf.

  30. 7.8CVE-2019-13689EPSS 0.3%

    Inappropriate implementation in OS in Google Chrome on ChromeOS prior to 75.0.3770.80 allowed a remote attacker to perform arbitrary read/write via a malicious file. (Chromium security severity: Critical)

  31. 6.5CVE-2023-40028ExploitEPSS 69%

    Ghost is an open source content management system. Versions prior to 5.59.1 are subject to a vulnerability which allows authenticated users to upload files that are symlinks. This can be exploited to perform an arbitrary file read of any f…

  32. 7.8CVE-2023-38175EPSS 0.5%

    Microsoft Windows Defender Elevation of Privilege Vulnerability

  33. 9.8CVE-2023-36903EPSS 1.6%

    Windows System Assessment Tool Elevation of Privilege Vulnerability

  34. 7.1CVE-2023-36876EPSS 0.5%

    Reliability Analysis Metrics Calculation (RacTask) Elevation of Privilege Vulnerability

  35. 7.8CVE-2023-35379EPSS 0.6%

    Reliability Analysis Metrics Calculation Engine (RACEng) Elevation of Privilege Vulnerability

  36. 7.5CVE-2022-48579EPSS 0.8%

    UnRAR before 6.2.3 allows extraction of files outside of the destination folder via symlink chains.

  37. 9.1CVE-2023-39107EPSS 1.2%

    An arbitrary file overwrite vulnerability in NoMachine Free Edition and Enterprise Client for macOS before v8.8.1 allows attackers to overwrite root-owned files by using hardlinks.

  38. 6.5CVE-2023-4053EPSS 0.8%

    A website could have obscured the full screen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects F…

  39. 6.5CVE-2023-4052EPSS 0.7%

    The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling user account. This could be combined wit…

  40. 7.8CVE-2023-36874KEVExploitEPSS 43%

    Windows Error Reporting Service Elevation of Privilege Vulnerability

  41. 7.8CVE-2023-35353EPSS 0.5%

    Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

  42. 7.1CVE-2023-35347EPSS 0.5%

    Microsoft Install Service Elevation of Privilege Vulnerability

  43. 7.8CVE-2023-35342EPSS 0.5%

    Windows Image Acquisition Elevation of Privilege Vulnerability

  44. 7.8CVE-2023-35320EPSS 0.5%

    Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

  45. 7.8CVE-2023-33148ExploitEPSS 2.1%

    Microsoft Office Elevation of Privilege Vulnerability

  46. 9.8CVE-2023-32056EPSS 1.2%

    Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

  47. 7.8CVE-2023-32053EPSS 0.5%

    Windows Installer Elevation of Privilege Vulnerability

  48. 7.0CVE-2023-32050EPSS 0.4%

    Windows Installer Elevation of Privilege Vulnerability

  49. 6.5CVE-2023-37206EPSS 0.7%

    Uploading files which contain symlinks may have allowed an attacker to trick a user into submitting sensitive data to a malicious website. This vulnerability affects Firefox < 115.

  50. 7.1CVE-2023-27469EPSS 0.4%

    Malwarebytes Anti-Exploit 4.4.0.220 is vulnerable to arbitrary file deletion and denial of service via an ALPC message in which FullFileNamePath lacks a '\0' character.