CVE-2017-15111

    Dashboard / Vulnerabilities / CVE-2017-15111

    CVE-2017-15111

    Published: 20 Jan 2018Last Modified: 8 Jul 2026

    Summary:

    Details: keycloak-httpd-client-install versions before 0.8 insecurely creates temporary file allowing local attackers to overwrite other files via symbolic link.

    References: https://access.redhat.com/errata/RHSA-2019:2137, https://github.com/jdennis/keycloak-httpd-client-install/commit/07f26e213196936fb328ea0c1d5a66a09d8b5440

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -671fb011cda8ff809777f96d69bb837e60dd6861

    Affected versions

    RELEASE_0_7

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High