111
Weakness Ordinalities
Resultant :
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Alternate Terms
Symlink following :
symlink vulnerability :
Likelihood Of Exploit
High
Common Consequences
Scope Impact Likelihood
Confidentiality
Integrity
Read Files or Directories
Modify Files or Directories
Potential Mitigations
Phase: Implementation
Symbolic link attacks often occur when a program creates a tmp directory that stores files/
links. Access to the directory should be restricted to the program as to prevent attackers from
manipulating the files.
Phase: Architecture and Design
Strategy = Separation of Privilege
CWE Version 4.14
CWE-61: UNIX Symbolic Link (Symlink) Following
CWE-61: UNIX Symbolic Link (Symlink) Following