cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified impact via a symlink attack on a cache file with a predictable name in /tmp/suds/.
References
Configurations
History
No history.
Information
Published : 2013-09-23 20:55
Updated : 2024-02-28 12:00
NVD link : CVE-2013-2217
Mitre link : CVE-2013-2217
CVE.ORG link : CVE-2013-2217
JSON object : View
Products Affected
redhat
- enterprise_linux
jeff_ortel
- suds
opensuse
- opensuse
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')