Fallos del tipo CWE-59

823 resultados

Seguimento de links simbólicos (symlink race condition)

Ocorre quando uma aplicação opera sobre um arquivo sem validar se ele é um link simbólico, permitindo que um atacante redirecione a operação para um arquivo arbitrário no sistema. O código assume que está acessando um arquivo legítimo, mas na verdade está sendo manipulado para acessar (ler, escrever ou deletar) qualquer outro arquivo que a aplicação tenha permissão.

Ejemplo

Um script de limpeza temporária com privilégios de root deleta arquivos em /tmp/cache/ sem verificar se são links simbólicos. Um atacante cria um link /tmp/cache/dados → /etc/passwd e consegue deletar arquivos críticos do sistema. Ou um backup toca em /tmp/file, que é na verdade um symlink para /home/usuario/.ssh/id_rsa, expondo a chave privada.

Cómo mitigar

Use funções seguras que não seguem symlinks (como `lstat()` em vez de `stat()` no Linux), valide se o caminho é um link antes de operar, use `O_NOFOLLOW` em `open()`, ou execute operações em diretórios com permissões restritivas (apenas proprietário pode criar arquivos). Em ambientes críticos, considere usar containers ou jails.

CVE-2024-29188HIGHMalicious directory junction can cause WiX RemoveFoldersEx to possibly delete elevated filesEPSS 0.2%CVE-2024-51721HIGHVulnerabilities in SecuSUITE Server Components Impact SecuSUITEEPSS 0.2%CVE-2026-53784HIGHrsync < 3.5.0 Path Traversal via Symlink Module RootEPSS 0.2%CVE-2022-31256HIGHsendmail: mail to root privilege escalation via sm-client.pre scriptEPSS 0.2%CVE-2025-3224HIGHElevation of Privilege in Docker Desktop for Windows during Upgrade due to Insecure Directory DeletionEPSS 0.2%CVE-2023-27529HIGHWacom Tablet Driver installer prior to 6.4.2-1 (for macOS) contains an improper link resolution before file access vulnerability. When a useEPSS 0.2%CVE-2024-45315MEDIUMThe Improper link resolution before file access ('Link Following') vulnerability in SonicWall Connect Tunnel (version 12.4.3.271 and earlierEPSS 0.2%CVE-2026-28866MEDIUMThis issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4EPSS 0.2%CVE-2025-43394MEDIUMThis issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 2EPSS 0.2%CVE-2022-2898MEDIUMMeasuresoft ScadaPro Server and Client Link FollowingEPSS 0.2%CVE-2026-53803HIGHrsync < 3.5.0 Symlink Following Arbitrary File OverwriteEPSS 0.2%CVE-2026-82248MEDIUMgitoxide before 0.33.0 Path Traversal via symlink followingEPSS 0.2%CVE-2025-0146LOWZoom Workplace app for macOS - Symlink FollowingEPSS 0.2%CVE-2020-3432MEDIUMCisco AnyConnect Secure Mobility Client for Mac OS File Corruption VulnerabilityEPSS 0.2%CVE-2026-74796HIGHOpenTofu before 1.11.7 Symlink Following Path TraversalEPSS 0.2%CVE-2026-50526HIGH.NET Tampering VulnerabilityEPSS 0.2%CVE-2025-31198MEDIUMThis issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS VenturaEPSS 0.2%CVE-2025-62676MEDIUMAn Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet FortiClientWindows 7.4.0 EPSS 0.2%CVE-2023-45159HIGH1E Client installer can perform arbitrary file deletion on protected filesEPSS 0.2%CVE-2023-43590HIGHLink following in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation of privilege via locaEPSS 0.2%