Vulnerabilidades de acl project (CVE)

Registros CVE publicados para acl project, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

3 resultados
6.3Media
CVE-2026-54370

acl < 2.4.0 TOCTOU Symlink Traversal via getfacl/setfacl/chacl

acl project acl

acl before version 2.4.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link between an lstat() check and subsequent symlink-fo…

7.1Alta
CVE-2026-54369

acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions

acl project acl; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 8

acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to escalate privileges by replacing any pathn…

9.8Crítica
CVE-2018-25320

ACL Analytics 11.x - 13.0.0.579 Arbitrary Code Execution

acl ACL Analytics

ACL Analytics versions 11.x through 13.0.0.579 contain an arbitrary code execution vulnerability that allows attackers to execute arbitrary commands by leveraging the EXECUTE function. Attackers can use bitsadmin to download malicious PowerShell scripts and e…