Vulnerability in Cisofy Lynis

CVE-2014-3982

include/tests_webservers in Lynis before 1.5.5 on AIX allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis.##### file.

EPSS: 0.003 (26.6th percentile) — read the EPSS interpretation.

Affected products

  • Cisofy Lynis — versions 1.5.0, 1.5.1, 1.5.2
  • N/a — versions n/a

Weakness classification (CWE)

References