CVE-2017-1301

    Dashboard / Vulnerabilities / CVE-2017-1301

    CVE-2017-1301

    Published: 5 Oct 2017Last Modified: 10 Mar 2026

    Summary:

    Details: IBM Spectrum Protect 7.1 and 8.1 could allow a local attacker to launch a symlink attack. IBM Spectrum Protect Backup-archive Client creates temporary files insecurely. A local attacker could exploit this vulnerability by creating a symbolic link from a temporary file to various files on the system, which could allow the attacker to overwrite arbitrary files on the system with elevated privileges. IBM X-Force ID: 125163.

    References: , http://www.securityfocus.com/bid/101107, https://exchange.xforce.ibmcloud.com/vulnerabilities/125163, http://www.ibm.com/support/docview.wss?uid=swg22006248

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2017-1301 | CVE-DB