CWE-59: Improper Link Resolution Before File Access (Link Following), page 21

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

What the weakness is: CWE-59 at MITRE

1. 7.1CVE-2021-45442EPSS 0.4%2022-01-10

   A link following denial-of-service vulnerability in Trend Micro Worry-Free Business Security (on prem only) could allow a local attacker to overwrite arbitrary files in the context of SYSTEM. This is similar to, but not the same as CVE-202…

2. 7.8CVE-2021-45231EPSS 0.7%2022-01-10

   A link following privilege escalation vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a local attacker to create a specially crafted file with arbitr…

3. 7.1CVE-2021-44024EPSS 0.4%2022-01-10

   A link following denial-of-service vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a local attacker to overwrite arbitrary files in the context of SY…

4. 6.8CVE-2021-20153EPSS 1.0%2021-12-30

   Trendnet AC2600 TEW-827DRU version 2.08B01 contains a symlink vulnerability in the bittorrent functionality. If enabled, the bittorrent functionality is vulnerable to a symlink attack that could lead to remote code execution on the device.…

5. 8.8CVE-2021-23772EPSS 1.9%2021-12-24

   This affects all versions of package github.com/kataras/iris; all versions of package github.com/kataras/iris/v12. The unsafe handling of file names during upload using UploadFormFiles method may enable attackers to write to arbitrary loca…

6. 7.1CVE-2021-44023EPSS 0.4%2021-12-16

   A link following denial-of-service (DoS) vulnerability in the Trend Micro Security (Consumer) 2021 familiy of products could allow an attacker to abuse the PC Health Checkup feature of the product to create symlinks that would allow modifi…

7. 7.8CVE-2021-43238EPSS 0.9%2021-12-15

   Windows Remote Access Elevation of Privilege Vulnerability

8. 7.3CVE-2021-43237EPSS 1.1%2021-12-15

   Windows Setup Elevation of Privilege Vulnerability

9. 5.0CVE-2021-42297EPSS 1.4%2021-11-24

   Windows 10 Update Assistant Elevation of Privilege Vulnerability

10. 7.8CVE-2021-44038EPSS 0.8%2021-11-19

    An issue was discovered in Quagga through 1.2.4. Unsafe chown/chmod operations in the suggested spec file allow users (with control of the non-root-owned directory /etc/quagga) to escalate their privileges to root upon package installation…

11. 7.1CVE-2021-41057EPSS 0.3%2021-11-14

    In WIBU CodeMeter Runtime before 7.30a, creating a crafted CmDongles symbolic link will overwrite the linked file without checking permissions.

12. 5.5CVE-2021-41379KEVEPSS 19%2021-11-10

    Windows Installer Elevation of Privilege Vulnerability

13. 6.1CVE-2021-3641EPSS 0.4%2021-11-09

    Improper Link Resolution Before File Access ('Link Following') vulnerability in the EPAG component of Bitdefender Endpoint Security Tools for Windows allows a local attacker to cause a denial of service. This issue affects: Bitdefender Gra…

14. 8.8CVE-2021-21695EPSS 2.1%2021-11-04

    FilePath#listFiles lists files outside directories that agents are allowed to access when following symbolic links in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier.

15. 9.8CVE-2021-21691EPSS 2.1%2021-11-04

    Creating symbolic links is possible without the 'symlink' agent-to-controller access control permission in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier.

16. 8.1CVE-2021-21686EPSS 2.0%2021-11-04

    File path filters in the agent-to-controller security subsystem of Jenkins 2.318 and earlier, LTS 2.303.2 and earlier do not canonicalize paths, allowing operations to follow symbolic links to outside allowed directories.

17. 7.5CVE-2021-22488EPSS 0.7%2021-10-28

    There is an Unauthorized file access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability by modifying soft links may tamper with the files restored from backups.

18. 7.8CVE-2021-37969EPSS 0.9%2021-10-08

    Inappropriate implementation in Google Updater in Google Chrome on Windows prior to 94.0.4606.54 allowed a remote attacker to perform local privilege escalation via a crafted file.

19. 7.1CVE-2021-36286EPSS 0.3%2021-09-28

    Dell SupportAssist Client Consumer versions 3.9.13.0 and any versions prior to 3.9.13.0 contain an arbitrary file deletion vulnerability that can be exploited by using the Windows feature of NTFS called Symbolic links. Symbolic links can b…

20. 7.8CVE-2021-34408EPSS 0.6%2021-09-27

    The Zoom Client for Meetings for Windows in all versions before version 5.3.2 writes log files to a user writable directory as a privileged user during the installation or update of the client. This could allow for potential privilege esca…

21. 7.1CVE-2021-1612EPSS 0.2%2021-09-23

    A vulnerability in the Cisco IOS XE SD-WAN Software CLI could allow an authenticated, local attacker to overwrite arbitrary files on the local system. This vulnerability is due to improper access controls on files within the local file sys…

22. 7.8CVE-2021-31843EPSS 0.3%2021-09-17

    Improper privileges management vulnerability in McAfee Endpoint Security (ENS) Windows prior to 10.7.0 September 2021 Update allows local users to access files which they would otherwise not have access to via manipulating junction links t…

23. 8.1CVE-2021-41072EPSS 2.3%2021-09-14

    squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A squashfs filesystem that has been crafted to include a symbolic link and then contents under the same filen…

24. 7.8CVE-2021-36744EPSS 0.5%2021-09-06

    Trend Micro Security (Consumer) 2021 and 2020 are vulnerable to a directory junction vulnerability which could allow an attacker to exploit the system to escalate privileges and create a denial of service.

25. 7.8CVE-2021-39135EPSS 0.6%2021-08-31

    `@npmcli/arborist`, the library that calculates dependency trees and manages the node_modules folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts will be met, and the extraction of packa…

26. 8.6CVE-2021-37712EPSS 1.9%2021-08-31

    The npm package "tar" (aka node-tar) before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be modified b…

27. 8.6CVE-2021-37701EPSS 3.3%2021-08-31

    The npm package "tar" (aka node-tar) before versions 4.4.16, 5.0.8, and 6.1.7 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be modified by…

28. 6.0CVE-2021-36928EPSS 0.9%2021-08-26

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

29. 5.5CVE-2021-30968EPSS 1.1%2021-08-24

    A validation issue related to hard link behavior was addressed with improved sandbox restrictions. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, wa…

30. 5.5CVE-2021-30855EPSS 2.4%2021-08-24

    A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, iOS 15 and iPadOS 15, watchOS 8, mac…

31. 9.1CVE-2021-32825EPSS 0.9%2021-08-16

    bblfshd is an open source self-hosted server for source code parsing. In bblfshd before commit 4265465b9b6fb5663c30ee43806126012066aad4 there is a "zipslip" vulnerability. The unsafe handling of symbolic links in an unpacking routine may e…

32. 7.0CVE-2021-26426EPSS 0.7%2021-08-12

    Windows User Account Profile Picture Elevation of Privilege Vulnerability

33. 7.8CVE-2021-26425EPSS 0.9%2021-08-12

    Windows Event Tracing Elevation of Privilege Vulnerability

34. 9.1CVE-2021-38570EPSS 1.2%2021-08-11

    An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows attackers to delete arbitrary files (during uninstallation) via a symlink.

35. 7.5CVE-2021-38511EPSS 1.4%2021-08-10

    An issue was discovered in the tar crate before 0.4.36 for Rust. When symlinks are present in a TAR archive, extraction can create arbitrary directories via .. traversal.

36. 2.4CVE-2021-21740EPSS 0.4%2021-08-09

    There is an information leak vulnerability in the digital media player (DMS) of ZTE's residential gateway product. The attacker could insert the USB disk with the symbolic link into the residential gateway, and access unauthorized director…

37. 8.1CVE-2021-32803EPSS 7.8%2021-08-03

    The npm package "tar" (aka node-tar) before versions 6.1.2, 5.0.7, 4.4.15, and 3.2.3 has an arbitrary File Creation/Overwrite vulnerability via insufficient symlink protection. `node-tar` aims to guarantee that any file whose location woul…

38. 7.8CVE-2021-36983EPSS 0.5%2021-07-30

    replay-sorcery-kms in Replay Sorcery 0.6.0 allows a local attacker to gain root privileges via a symlink attack on /tmp/replay-sorcery or /tmp/replay-sorcery/device.sock.

39. 7.1CVE-2021-32610EPSS 73%2021-07-30

    In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.

40. 7.1CVE-2021-32000EPSS 0.3%2021-07-28

    A UNIX Symbolic Link (Symlink) Following vulnerability in the clone-master-clean-up.sh script of clone-master-clean-up in SUSE Linux Enterprise Server 12 SP3, SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allows local attackers to …

41. 7.1CVE-2021-1092EPSS 0.3%2021-07-22

    NVIDIA GPU Display Driver for Windows contains a vulnerability in the NVIDIA Control Panel application where it is susceptible to a Windows file system symbolic link attack where an unprivileged attacker can cause the applications to overw…

42. 7.1CVE-2021-1091EPSS 0.3%2021-07-22

    NVIDIA GPU Display driver for Windows contains a vulnerability where an unprivileged user can create a file hard link that causes the driver to overwrite a file that requires elevated privilege to modify, which could lead to data loss or d…

43. 7.8CVE-2021-26089EPSS 0.4%2021-07-12

    An improper symlink following in FortiClient for Mac 6.4.3 and below may allow an non-privileged user to execute arbitrary privileged shell commands during installation phase.

44. 7.5CVE-2021-32518EPSS 1.7%2021-07-07

    A vulnerability in share_link in QSAN Storage Manager allows remote attackers to create a symbolic link then access arbitrary files. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.

45. 6.5CVE-2021-32509EPSS 1.3%2021-07-07

    Absolute Path Traversal vulnerability in FileviewDoc in QSAN Storage Manager allows remote authenticated attackers access arbitrary files by injecting the Symbolic Link following the Url path parameter. The referred vulnerability has been …

46. 6.5CVE-2021-32508EPSS 1.3%2021-07-07

    Absolute Path Traversal vulnerability in FileStreaming in QSAN Storage Manager allows remote authenticated attackers access arbitrary files by injecting the Symbolic Link following the Url path parameter. The referred vulnerability has bee…

47. 4.7CVE-2020-4885EPSS 0.3%2021-06-24

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow a local user to access and change the configuration of Db2 due to a race condition of a symbolic link,. IBM X-Force ID: 190909.

48. 7.1CVE-2021-32557EPSS 0.4%2021-06-12

    It was discovered that the process_report() function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks.

49. 5.5CVE-2021-32555EPSS 0.3%2021-06-12

    It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the xorg-hwe-18.04 package apport hooks, it could expose private data to other local users.

50. 5.5CVE-2021-32554EPSS 0.3%2021-06-12

    It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the xorg package apport hooks, it could expose private data to other local users.