PT-2023-11767 · Swtpm · Swtpm

Marcus Meissner · Publicado 2022-07-08 · Atualizado 2024-06-15 · CVE-2020-28407

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions swtpm versions 0.4.1 and earlier swtpm versions 0.5.x before 0.5.1

Description A local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall. This issue allows an attacker to potentially gain unauthorized access to sensitive data.

Recommendations For swtpm versions 0.4.1 and earlier, update to version 0.4.2 or later. For swtpm versions 0.5.x before 0.5.1, update to version 0.5.1 or later. As a temporary workaround, consider restricting access to temporary files to minimize the risk of exploitation.

Correção

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

CVE-2020-28407

OESA-2022-1741

OPENSUSE-SU-2024:11416-1

Produtos afetados

Swtpm

Referências · 15

• https://github.com/stefanberger/swtpm/releases/tag/v0.4.2 · Nota
• https://github.com/stefanberger/swtpm/releases/tag/v0.5.1 · Nota
• https://bugzilla.suse.com/show_bug.cgi?id=1198395 · Correção
• https://suse.com/security/cve/CVE-2020-28407 · Nota
• https://twitter.com/DMFezzaReedCISA/status/1720309664963838171 · Publicação no Twitter
• https://osv.dev/vulnerability/OESA-2022-1741 · Aviso do Fabricante
• https://t.me/cibsecurity/73492 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2020-28407 · Nota de Segurança
• https://ubuntu.com/security/CVE-2020-28407 · Aviso do Fabricante
• https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1741 · Nota
• https://twitter.com/CVEnew/status/1720284288032096737 · Publicação no Twitter
• https://osv.dev/vulnerability/openSUSE-SU-2024:11416-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2020-28407 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2020-28407 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-28407 · Aviso do Fabricante