Falhas do tipo CWE-427

894 resultados

Caminho de busca ou elemento não controlado

A aplicação procura por um recurso (arquivo, biblioteca, módulo) em múltiplos diretórios sem validar ou controlar a ordem de busca, permitindo que um atacante injete um arquivo malicioso em um caminho que será verificado primeiro. Isso leva a execução de código não autorizado ou bypass de controles de segurança.

Exemplo

Um programa em C carrega uma biblioteca dinâmica (DLL no Windows ou SO no Linux) procurando em diretórios listados em uma variável de ambiente. Se o atacante conseguir escrever um arquivo malicioso com o mesmo nome em um diretório anterior da busca (como o diretório atual), a aplicação carrega a versão maliciosa sem questionar.

Como mitigar

Use caminhos absolutos e hardcoded para recursos críticos; nunca confie em variáveis de ambiente para localizá-los. Valide hash ou assinatura digital de bibliotecas carregadas e restrinja permissões de escrita nos diretórios de busca apenas ao administrador.

CVE-2022-34825CRITICALUncontrolled Search Path Element in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0EPSS 1.3%CVE-2017-5170—An Uncontrolled Search Path Element issue was discovered in Moxa SoftNVR-IA Live Viewer, Version 3.30.3122 and prior versions. An uncontrollEPSS 1.3%CVE-2017-20052MEDIUMPython pgAdmin4 uncontrolled search pathEPSS 1.3%CVE-2024-23054CRITICALAn issue in Plone Docker Official Image 5.2.13 (5221) open-source software that could allow for remote code execution due to a package listeEPSS 1.3%CVE-2020-5145—SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL hijacking) vulnerability. Successful exploEPSS 1.2%CVE-2017-14029—An Uncontrolled Search Path Element issue was discovered in Trihedral VTScada 11.3.03 and prior. The program will execute specially crafted EPSS 1.2%CVE-2022-4313HIGHA vulnerability was reported where through modifying the scan variables, an authenticated user in Tenable products, that has Scan Policy ConEPSS 1.2%CVE-2019-6825—A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow a malicEPSS 1.2%CVE-2020-24423HIGHUncontrolled Search Path in Adobe Media Encoder for WindowsEPSS 1.2%CVE-2020-24424HIGHUncontrolled Search Path in Adobe Premiere Pro for WindowsEPSS 1.2%CVE-2024-6769HIGHMedium to High Integrity Privilege Escalation in Microsoft WindowsEPSS 1.1%CVE-2019-5631HIGHRapid7 InsightAppSec Local Privilege EscalationEPSS 1.1%CVE-2024-13946HIGHBinary Planting / LoadLibrary DLL's not SignedEPSS 1.0%CVE-2022-24765MEDIUMUncontrolled search for the Git directory in Git for WindowsEPSS 1.0%CVE-2023-27859MEDIUMIBM Db2 code executionEPSS 1.0%CVE-2022-28687HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802EPSS 1.0%CVE-2023-0142MEDIUMUncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager (DSM) before 6.2.4-25556-8EPSS 1.0%CVE-2025-29802HIGHVisual Studio Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2023-23554HIGHUncontrolled search path element vulnerability exists in pg_ivm versions prior to 1.5.1. When refreshing an IMMV, pg_ivm executes functions EPSS 0.9%CVE-2019-5629HIGHRapid7 Insight Agent, version 2.6.3 and prior, suffers from a local privilege escalation due to an uncontrolled DLL search path. SpecificallEPSS 0.9%