CWE-59

Medium likelihood

Improper Link Resolution Before File Access ('Link Following')

Parent: CWE-706 - Use of Incorrectly-Resolved Name or Reference

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

1,522 vulnerabilities with CWE-59
CVE-2020-27643 MEDIUM
1E Client 5.0.0.745-4.1.0.267 - Privilege Escalation
CVSS 6.5
CVE-2020-27172 CRITICAL
G-Data <25.5.9.25 - Privilege Escalation
CVSS 9.8
CVE-2020-35766 HIGH
OpenDKIM < 2.10.3 - Privilege Escalation via Symlink Attack on /tmp/testkeys
CVSS 7.8
CVE-2020-28641 HIGH
Malwarebytes Endpoint Protection < 1.2.0.849 - Arbitrary File Deletion via Symbolic Link
CVSS 7.1
CVE-2020-26277 MEDIUM
DBdeployer <1.58.2 - Privilege Escalation
CVSS 6.1
CVE-2020-10003 HIGH
iPadOS < 14.2 - Privilege Escalation via Symlink Path Validation Flaw
CVSS 7.8
CVE-2020-28935 MEDIUM
Nlnetlabs Name Server Daemon < 4.3.4 - Symlink Following
CVSS 5.5
CVE-2020-29529 HIGH
HashiCorp go-slug <0.5.0 - Path Traversal
CVSS 7.5
CVE-2020-5797 MEDIUM
TP-Link Archer C9(US)_V1_180125 - Info Disclosure
CVSS 6.1
CVE-2020-25989 HIGH
pritunl-client-electron 1.0.1116.6-1.2.2550.20 - Privilege Escalation via Arbitrary File Write
CVSS 7.8
CVE-2020-27697 HIGH
Trend Micro Security 2020 < 16.0 - DLL Hijacking via Symlink Attack
CVSS 7.8
CVE-2020-23968 HIGH
Ilex International Sign&go Workstation Security Suite 7.1 - Privilege Escalation via Symlink Attack
CVSS 7.8
CVE-2020-5795 MEDIUM
TP-Link Archer A7(US)_V5_200721 - RCE
CVSS 6.2
CVE-2020-6015 MEDIUM
Check Point Endpoint Security <E84.10 - DoS
CVSS 5.5
CVE-2020-16007 HIGH
Google Chrome < 86.0.4240.183 - Privilege Escalation via Crafted Filesystem
CVSS 7.8
CVE-2020-9901 HIGH
iPadOS < 13.6 - Privilege Escalation via Symlink Path Validation Flaw
CVSS 7.8
CVE-2020-9900 HIGH
iPadOS < 13.6 - Privilege Escalation via Symlink Path Validation Flaw
CVSS 7.8
CVE-2020-16939 HIGH
Windows Group Policy - Elevation of Privilege via Improper Access Check
CVSS 7.8
CVE-2020-25776 HIGH
Trend Micro Antivirus for Mac 2020 - Privilege Escalation via Symbolic Link Attack
CVSS 7.8
CVE-2020-24562 HIGH
Trend Micro OfficeScan XG SP1 - Privilege Escalation
CVSS 7.8
CVE-2020-17365 HIGH
Hotspot Shield VPN client <10.3.0 - Privilege Escalation
CVSS 7.8
CVE-2020-6546 HIGH
Google Chrome < 84.0.4147.125 - Privilege Escalation via Crafted Filesystem
CVSS 7.8
CVE-2020-25744 HIGH
SaferVPN < 5.0.3.3 - Arbitrary File Overwrite via Symlink Following
CVSS 8.1
CVE-2020-25289 MEDIUM
AVAST SecureLine VPN < 5.6.4982.470 - Arbitrary File Write via Symbolic Link
CVSS 5.5
CVE-2020-16853 HIGH
OneDrive - Elevation of Privilege via Symbolic Link Handling
CVSS 7.1
Details
Vulnerabilities 1,522
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits