CVE-2017-15111 keycloak-httpd-client-install symlink attack vulnerability
MediumCVSS 5.5
EPSS 0.39%
- Published
- Updated
- Exploit status
- No public exploit known
Description
keycloak-httpd-client-install versions before 0.8 insecurely creates temporary file allowing local attackers to overwrite other files via symbolic link.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi keycloak-httpd-client-install(PyPI) | < 0.8 | 0.8 |
| keycloak-httpd-client-install project keycloak-httpd-client-install | < 0.8 | 0.8 |
| jdennis keycloak-httpd-client-install | = before 0.8 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch vendor-advisory
- RHSA-2019:2137 vendor-advisory
- github.com product
- github.com vendor-advisory
- pypi.org product