CVE-2016-9595

    Dashboard / Vulnerabilities / CVE-2016-9595

    CVE-2016-9595

    Published: 27 Jul 2018Last Modified: 7 Aug 2026

    Summary:

    Details: A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files.

    References: https://access.redhat.com/errata/RHSA-2018:0336, https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9595

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -600b173da31275e2b6852faf0dd59feb1d2fdb8f

    Affected versions

    3.4.0.rc2

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High