Weaknesses of type CWE-427

863 results

Caminho de busca ou elemento não controlado

A aplicação procura por bibliotecas, configurações ou outros recursos em diretórios sem validar adequadamente quais caminhos ela está usando, permitindo que um atacante injete uma versão maliciosa em um local que será encontrado primeiro. Isso acontece porque a ordem ou composição do caminho de busca não é explicitamente controlada.

Example

Um programa Java com classpath que inclui o diretório atual (.) antes de caminhos do sistema; um atacante coloca uma classe maliciosa no diretório de trabalho e ela é carregada em vez da legítima. Ou um script que procura por um arquivo de configuração em múltiplas pastas sem especificar o caminho absoluto, sendo enganado por um arquivo plantado em /tmp.

How to mitigate

Use caminhos absolutos explícitos em vez de relativos; remova diretórios inseguros (como o atual) do caminho de busca; valide a origem e integridade de recursos carregados (checksums, assinaturas); implemente listas de permitidos para diretórios confiáveis.

CVE-2020-3153MEDIUMCisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path VulnerabilityEPSS 27.5%KEVCVE-2024-48990HIGHQualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart intEPSS 19.9%CVE-2020-3433HIGHCisco AnyConnect Secure Mobility Client for Windows DLL Hijacking VulnerabilityEPSS 10.0%KEVCVE-2022-2334HIGHSofting Secure Integration Server Uncontrolled Search Path ElementEPSS 9.9%CVE-2024-48992HIGHQualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart intEPSS 6.6%CVE-2021-30359—The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps during the installation.EPSS 3.9%CVE-2022-21668HIGHPipenv's requirements.txt parsing allows malicious index url in commentsEPSS 3.9%CVE-2019-8062HIGHAdobe After Effects versions 16 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could leEPSS 3.2%CVE-2020-24422HIGHUncontrolled Search Path in Creative Cloud Desktop ApplicationEPSS 3.1%CVE-2021-28595HIGHAdobe Dimension Uncontrolled Search Path Element Could Lead To Remote Code ExecutionEPSS 2.8%CVE-2022-38395HIGHHP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fusion to launch HP Performance Tune-up. ItEPSS 2.8%CVE-2021-28594HIGHCreative Cloud Desktop installer Uncontrolled Search Path element could lead to arbitrary code executionEPSS 2.7%CVE-2021-21010HIGHUncontrolled search path element in Adobe InCopyEPSS 2.5%CVE-2017-12717—An Uncontrolled Search Path Element issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A maliciously crafted dll fEPSS 2.4%CVE-2021-28570HIGHAdobe After Effects uncontrolled search path element vulnerability could lead to remote code executionEPSS 2.4%CVE-2021-21008HIGHUncontrolled Search Path Element vulnerability in Animate 21.0EPSS 2.4%CVE-2022-23202HIGHAdobe Creative Cloud Desktop Uncontrolled Search Path Element Arbitrary code executionEPSS 2.2%CVE-2021-21007HIGHUncontrolled search path element vulnerability in Illustrator 25.0 could lead to arbitrary code executionEPSS 2.2%CVE-2021-28636HIGHAdobe Acrobat Reader Unquoted Search Path VulnerabilityEPSS 2.1%CVE-2024-24916MEDIUMDLL-HiJackingEPSS 2.1%