php-fpm allows local users to write to or create arbitrary files via a symlink attack.
References
Link | Resource |
---|---|
https://bugzilla.redhat.com/show_bug.cgi?id=1228721 | Issue Tracking Third Party Advisory VDB Entry |
Configurations
Information
Published : 2017-08-25 11:29
Updated : 2017-09-06 12:18
NVD link : CVE-2015-3211
Mitre link : CVE-2015-3211
JSON object : View
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')
Products Affected
php-fpm
- php-fpm