Weakness Name | Source | |
---|---|---|
Improper Link Resolution Before File Access ('Link Following') The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource. |
Metrics | Score | Severity | CVSS Vector | Source |
---|---|---|---|---|
V2 | 6.9 | AV:L/AC:M/Au:N/C:C/I:C/A:C | nvd@nist.gov |
Redhat>>Cloudforms_3.0_management_engine >> Version To (including) 5.2.4
Redhat>>Cloudforms_3.0_management_engine >> Version 5.2
Redhat>>Cloudforms_3.0_management_engine >> Version 5.2.1
Redhat>>Cloudforms_3.0_management_engine >> Version 5.2.1.6
Redhat>>Cloudforms_3.0_management_engine >> Version 5.2.2
Redhat>>Cloudforms_3.0_management_engine >> Version 5.2.3
Redhat>>Cloudforms_3.0_management_engine >> Version 5.2.3.2