Falhas do tipo CWE-427

863 resultados

Caminho de busca ou elemento não controlado

A aplicação procura por um recurso (arquivo, biblioteca, módulo) em múltiplos diretórios sem validar ou controlar a ordem de busca, permitindo que um atacante injete um arquivo malicioso em um caminho que será verificado primeiro. Isso leva a execução de código não autorizado ou bypass de controles de segurança.

Exemplo

Um programa em C carrega uma biblioteca dinâmica (DLL no Windows ou SO no Linux) procurando em diretórios listados em uma variável de ambiente. Se o atacante conseguir escrever um arquivo malicioso com o mesmo nome em um diretório anterior da busca (como o diretório atual), a aplicação carrega a versão maliciosa sem questionar.

Como mitigar

Use caminhos absolutos e hardcoded para recursos críticos; nunca confie em variáveis de ambiente para localizá-los. Valide hash ou assinatura digital de bibliotecas carregadas e restrinja permissões de escrita nos diretórios de busca apenas ao administrador.

CVE-2020-3153MEDIUMCisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path VulnerabilityEPSS 27.5%KEVCVE-2024-48990HIGHQualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart intEPSS 19.9%CVE-2020-3433HIGHCisco AnyConnect Secure Mobility Client for Windows DLL Hijacking VulnerabilityEPSS 10.0%KEVCVE-2022-2334HIGHSofting Secure Integration Server Uncontrolled Search Path ElementEPSS 9.9%CVE-2024-48992HIGHQualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart intEPSS 6.6%CVE-2021-30359—The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps during the installation.EPSS 3.9%CVE-2022-21668HIGHPipenv's requirements.txt parsing allows malicious index url in commentsEPSS 3.9%CVE-2019-8062HIGHAdobe After Effects versions 16 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could leEPSS 3.2%CVE-2020-24422HIGHUncontrolled Search Path in Creative Cloud Desktop ApplicationEPSS 3.1%CVE-2021-28595HIGHAdobe Dimension Uncontrolled Search Path Element Could Lead To Remote Code ExecutionEPSS 2.8%CVE-2022-38395HIGHHP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fusion to launch HP Performance Tune-up. ItEPSS 2.8%CVE-2021-28594HIGHCreative Cloud Desktop installer Uncontrolled Search Path element could lead to arbitrary code executionEPSS 2.7%CVE-2021-21010HIGHUncontrolled search path element in Adobe InCopyEPSS 2.5%CVE-2017-12717—An Uncontrolled Search Path Element issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A maliciously crafted dll fEPSS 2.4%CVE-2021-28570HIGHAdobe After Effects uncontrolled search path element vulnerability could lead to remote code executionEPSS 2.4%CVE-2021-21008HIGHUncontrolled Search Path Element vulnerability in Animate 21.0EPSS 2.4%CVE-2022-23202HIGHAdobe Creative Cloud Desktop Uncontrolled Search Path Element Arbitrary code executionEPSS 2.2%CVE-2021-21007HIGHUncontrolled search path element vulnerability in Illustrator 25.0 could lead to arbitrary code executionEPSS 2.2%CVE-2021-28636HIGHAdobe Acrobat Reader Unquoted Search Path VulnerabilityEPSS 2.1%CVE-2024-24916MEDIUMDLL-HiJackingEPSS 2.1%