cve.bz

CWE-59: Improper Link Resolution Before File Access (Link Following), page 18

Filter

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

What the weakness is: CWE-59 at MITRE

Ask an AI about CWE-59

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-59: Improper Link Resolution Before File Access and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/59.html and https://cve.bz/cve/cwe/59?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.5CVE-2023-32556EPSS 0.3%

    A link following vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to disclose sensitive information. Please note: an attacker must first obtain the ability to execute low-privileged …

  2. 7.3CVE-2023-28065EPSS 0.2%

    Dell Command | Update, Dell Update, and Alienware Update versions 4.8.0 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit this vulnerability leading to…

  3. 7.1CVE-2023-28071EPSS 0.2%

    Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit this vulnerability to cr…

  4. 7.8CVE-2023-32012EPSS 0.5%

    Windows Container Manager Service Elevation of Privilege Vulnerability

  5. 8.1CVE-2023-29351EPSS 1.8%

    Windows Group Policy Elevation of Privilege Vulnerability

  6. 7.8CVE-2023-33865EPSS 0.9%

    RenderDoc before 1.27 allows local privilege escalation via a symlink attack. It relies on the /tmp/RenderDoc directory regardless of ownership.

  7. 7.8CVE-2023-2939EPSS 0.5%

    Insufficient data validation in Installer in Google Chrome on Windows prior to 114.0.5735.90 allowed a local attacker to perform privilege escalation via crafted symbolic link. (Chromium security severity: Medium)

  8. 8.8CVE-2023-33245EPSS 0.9%

    Minecraft through 1.19 and 1.20 pre-releases before 7 (Java) allow arbitrary file overwrite, and possibly code execution, via crafted world data that contains a symlink.

  9. 6.5CVE-2023-34204EPSS 0.6%

    imapsync through 2.229 uses predictable paths under /tmp and /var/tmp in its default mode of operation. Both of these are typically world-writable, and thus (for example) an attacker can modify imapsync's cache and overwrite files belongin…

  10. 7.8CVE-2023-27529EPSS 0.2%

    Wacom Tablet Driver installer prior to 6.4.2-1 (for macOS) contains an improper link resolution before file access vulnerability. When a user is tricked to execute a small malicious script before executing the affected version of the insta…

  11. 7.8CVE-2023-29343EPSS 1.8%

    SysInternals Sysmon for Windows Elevation of Privilege Vulnerability

  12. 7.1CVE-2023-24904EPSS 0.6%

    Windows Installer Elevation of Privilege Vulnerability

  13. 6.3CVE-2022-38730EPSS 0.3%

    Docker Desktop for Windows before 4.6 allows attackers to overwrite any file through the windowscontainers/start dockerBackendV2 API by controlling the data-root field inside the DaemonJSON field in the WindowsContainerStartRequest class. …

  14. 7.1CVE-2022-34292EPSS 0.3%

    Docker Desktop for Windows before 4.6.0 allows attackers to overwrite any file through a symlink attack on the hyperv/create dockerBackendV2 API by controlling the DataFolder parameter for DockerDesktop.vhdx, a similar issue to CVE-2022-31…

  15. 7.1CVE-2022-31647EPSS 0.3%

    Docker Desktop before 4.6.0 on Windows allows attackers to delete any file through the hyperv/destroy dockerBackendV2 API via a symlink in the DataFolder parameter, a different vulnerability than CVE-2022-26659.

  16. 6.3CVE-2023-28141EPSS 0.2%

    An NTFS Junction condition exists in the Qualys Cloud Agent for Windows platform in versions before 4.8.0.31. Attackers may write files to arbitrary locations via a local attack vector. This allows attackers to assume the privileges of the…

  17. 6.8CVE-2023-28972EPSS 0.4%

    An Improper Link Resolution Before File Access vulnerability in console port access of Juniper Networks Junos OS on NFX Series allows an attacker to bypass console access controls. When "set system ports console insecure" is enabled, root …

  18. 7.1CVE-2023-28222EPSS 0.7%

    Windows Kernel Elevation of Privilege Vulnerability

  19. 5.9CVE-2022-43293EPSS 0.8%

    Wacom Driver 6.3.46-1 for Windows was discovered to contain an arbitrary file write vulnerability via the component \Wacom\Wacom_Tablet.exe.

  20. 7.3CVE-2022-38604EPSS 0.6%

    Wacom Driver 6.3.46-1 for Windows and lower was discovered to contain an arbitrary file deletion vulnerability.

  21. 7.8CVE-2023-0652EPSS 0.3%

    Due to a hardlink created in the ProgramData folder during the repair process of the software, the installer (MSI) of WARP Client for Windows (<= 2022.12.582.0) allowed a malicious attacker to forge the destination of the hardlink and esca…

  22. 7.8CVE-2023-1412EPSS 0.3%

    An unprivileged (non-admin) user can exploit an Improper Access Control vulnerability in the Cloudflare WARP Client for Windows (<= 2022.12.582.0) to perform privileged operations with SYSTEM context by working with a combination of opport…

  23. 7.8CVE-2023-25940EPSS 0.2%

    Dell PowerScale OneFS version 9.5.0.0 contains improper link resolution before file access vulnerability in isi_gather_info. A high privileged local attacker could potentially exploit this vulnerability, leading to system takeover and it b…

  24. 7.5CVE-2022-47188EPSS 0.9%

    There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version. An attacker, making use of the default credentials, could upload a backup file containing a symlink to /etc/shadow, allowing him to obtain the conten…

  25. 7.8CVE-2023-28642EPSS 0.3%

    runc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration. This issue has been f…

  26. 7.8CVE-2023-28892EPSS 0.5%

    Malwarebytes AdwCleaner 8.4.0 runs as Administrator and performs an insecure file delete operation on C:\AdwCleaner\Logs\AdwCleaner_Debug.log in which the target location is user-controllable, allowing a non-admin user to escalate privileg…

  27. 7.8CVE-2023-26088EPSS 0.5%

    In Malwarebytes before 4.5.23, a symbolic link may be used delete any arbitrary file on the system by exploiting the local quarantine system. It can also lead to privilege escalation in certain scenarios.

  28. 7.8CVE-2023-1314EPSS 0.3%

    A vulnerability has been discovered in cloudflared's installer (<= 2023.3.0) for Windows 32-bits devices that allows a local attacker with no administrative permissions to escalate their privileges on the affected device. This vulnerabilit…

  29. 7.8CVE-2023-24930EPSS 0.5%

    Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability

  30. 5.5CVE-2023-24577EPSS 0.3%

    McAfee Total Protection prior to 16.0.50 allows attackers to elevate user privileges due to Improper Link Resolution via registry keys. This could enable a user with lower privileges to execute unauthorized tasks.

  31. 7.8CVE-2023-25148EPSS 0.4%

    A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to exploit the vulnerability by changing a specific file into a pseudo-symlink, allowing privilege escalation on affected installations. …

  32. 7.8CVE-2023-25146EPSS 0.4%

    A security agent link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to quarantine a file, delete the original folder and replace with a junction to an arbitrary location, ultimately leading to an ar…

  33. 7.8CVE-2023-25145EPSS 0.4%

    A link following vulnerability in the scanning function of Trend Micro Apex One agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-p…

  34. 6.8CVE-2023-27850EPSS 0.3%

    NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that allows users with access to this feature to access arbitrary files on the device.

  35. 5.5CVE-2022-22582EPSS 18%

    A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in Security Update 2022-003 Catalina, macOS Big Sur 11.6.5, macOS Monterey 12.3. A local user may be…

  36. 7.8CVE-2022-45697EPSS 0.3%

    Arbitrary File Delete vulnerability in Razer Central before v7.8.0.381 when handling files in the Accounts directory.

  37. 6.3CVE-2023-23558EPSS 0.3%

    In Eternal Terminal 6.2.1, TelemetryService uses fixed paths in /tmp. For example, a local attacker can create /tmp/.sentry-native-etserver with mode 0777 before the etserver process is started. The attacker can choose to read sensitive in…

  38. 5.6CVE-2023-21567EPSS 0.8%

    Visual Studio Denial of Service Vulnerability

  39. 5.5CVE-2023-22490EPSS 0.7%

    Git is a revision control system. Using a specially-crafted repository, Git prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8 can be tricked into using its local clone optimization even wh…

  40. 5.0CVE-2023-21722EPSS 0.9%

    .NET Framework Denial of Service Vulnerability

  41. 3.3CVE-2023-24572EPSS 0.2%

    Dell Command | Integration Suite for System Center, versions before 6.4.0 contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability leading to …

  42. 3.3CVE-2023-23697EPSS 0.2%

    Dell Command | Intel vPro Out of Band, versions before 4.4.0, contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability leading to arbitrary fo…

  43. 7.8CVE-2022-42292EPSS 0.2%

    NVIDIA GeForce Experience contains a vulnerability in the NVContainer component, where a user without administrator privileges can create a symbolic link to a file that requires elevated privileges to write to or modify, which may lead to …

  44. 8.2CVE-2023-25168EPSS 1.0%

    Wings is Pterodactyl's server control plane. This vulnerability can be used to delete files and directories recursively on the host system. This vulnerability can be combined with `GHSA-p8r3-83r8-jwj5` to overwrite files on the host syste…

  45. 8.8CVE-2023-25152EPSS 0.7%

    Wings is Pterodactyl's server control plane. Affected versions are subject to a vulnerability which can be used to create new files and directory structures on the host system that previously did not exist, potentially allowing attackers t…

  46. 5.5CVE-2022-42291EPSS 0.2%

    NVIDIA GeForce Experience contains a vulnerability in the installer, where a user installing the NVIDIA GeForce Experience software may inadvertently delete data from a linked location, which may lead to data tampering. An attacker does no…

  47. 7.8CVE-2020-36657EPSS 0.4%

    uptimed before 0.4.6-r1 on Gentoo allows local users (with access to the uptimed user account) to gain root privileges by creating a hard link within the /var/spool/uptimed directory, because there is an unsafe chown -R call.

  48. 7.1CVE-2023-20008EPSS 0.2%

    A vulnerability in the CLI of Cisco TelePresence CE and RoomOS Software could allow an authenticated, local attacker to overwrite arbitrary files on the local system of an affected device. This vulnerability is due to improper access co…

  49. 4.4CVE-2022-45440EPSS 0.2%

    A vulnerability exists in the FTP server of the Zyxel AX7501-B0 firmware prior to V5.17(ABPC.3)C0, which processes symbolic links on external storage media. A local authenticated attacker with administrator privileges could abuse this vuln…

  50. 6.5CVE-2022-3592EPSS 2.7%

    A symlink following vulnerability was found in Samba, where a user can create a symbolic link that will make 'smbd' escape the configured share path. This flaw allows a remote user with access to the exported part of the file system under …