What is the CVSS score of CVE-2012-0808?

CVE-2012-0808 has a CVSS 2.0 base score of 3.6 (Low). CVSS vector: AV:L/AC:L/Au:N/C:N/I:P/A:P. EPSS exploitation probability: 0.0%.

As31 CVE-2012-0808

LOW

Improper Link Resolution Before File Access (CWE-59)

2012-03-19 secalert@redhat.com

Information Disclosure As31

3.6

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

3.6 LOW

AV:L/AC:L/Au:N/C:N/I:P/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:L/Au:N/C:N/I:P/A:P

Attack Vector

Local

Attack Complexity

Low

Confidentiality

None

Integrity

Availability

Lifecycle Timeline

CVE Published

Mar 19, 2012 - 19:55 cve.org

LOW 3.6

DescriptionCVE.org

as31 2.3.1-4 does not seed the random number generator and generates predictable temporary file names, which makes it easier for local users to create or truncate files via a symlink attack.

AnalysisAI

as31 2.3.1-4 does not seed the random number generator and generates predictable temporary file names, which makes it easier for local users to create or truncate files via a symlink attack. Rated low severity (CVSS 3.6), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-59. as31 2.3.1-4 does not seed the random number generator and generates predictable temporary file names, which makes it easier for local users to create or truncate files via a symlink attack. Affected products include: Bdale Garbee As31.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.