PT-2023-11767 · Swtpm · Swtpm

Marcus Meissner · Published 2022-07-08 · Updated 2024-06-15 · CVE-2020-28407

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions swtpm versions 0.4.1 and earlier swtpm versions 0.5.x before 0.5.1

Description A local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall. This issue allows an attacker to potentially gain unauthorized access to sensitive data.

Recommendations For swtpm versions 0.4.1 and earlier, update to version 0.4.2 or later. For swtpm versions 0.5.x before 0.5.1, update to version 0.5.1 or later. As a temporary workaround, consider restricting access to temporary files to minimize the risk of exploitation.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2020-28407

OESA-2022-1741

OPENSUSE-SU-2024:11416-1

Affected Products

Swtpm

References · 15

• https://bugzilla.suse.com/show_bug.cgi?id=1198395 · Patch
• https://osv.dev/vulnerability/OESA-2022-1741 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-28407 · Security Note
• https://ubuntu.com/security/CVE-2020-28407 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11416-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-28407 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-28407 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-28407 · Vendor Advisory
• https://github.com/stefanberger/swtpm/releases/tag/v0.4.2 · Note
• https://github.com/stefanberger/swtpm/releases/tag/v0.5.1 · Note
• https://suse.com/security/cve/CVE-2020-28407 · Note
• https://twitter.com/DMFezzaReedCISA/status/1720309664963838171 · Twitter Post
• https://t.me/cibsecurity/73492 · Telegram Post
• https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1741 · Note
• https://twitter.com/CVEnew/status/1720284288032096737 · Twitter Post