CVE-2020-15861

Katalog CVE

CVSS 7.8 · High EPSS 0,46%

Kerentanan Improper Link Resolution Before File Access ('Link Following') pada net-snmp, canonical ubuntu linux +3 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link (symlink) following.

Rincian

Terbit di NVD

20 Agustus 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-59: Improper Link Resolution Before File Access ('Link Following')

EPSS (30 hari)

0,46% peluang dieksploitasi; lebih tinggi dari 37,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/net-snmp/net-snmp/commit/4fd9a450444a434a993bc72f7c3486ccce41f602 patch · advisory pihak ketiga
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=966599 issue tracking · advisory pihak ketiga
• https://github.com/net-snmp/net-snmp/issues/145 advisory pihak ketiga
• https://security.gentoo.org/glsa/202008-12 advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20200904-0001/ advisory pihak ketiga
• https://usn.ubuntu.com/4471-1/ advisory pihak ketiga