Storebackup

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-7040 Jan 21, 21:15 HIGH PATCH This Week

storeBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which allows symlink attacks that possibly lead to privilege escalation. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required.

Privilege Escalation Debian Canonical Debian Linux Leap +4

NVD

CVSS 3.1

8.1

EPSS

2.9%

CVE-2020-7040

EPSS 3% CVSS 8.1

HIGH PATCH This Week

storeBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which allows symlink attacks that possibly lead to privilege escalation. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required.

Privilege Escalation Debian Canonical +6

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy