Threats tagged 'ghsa-7vqx-f59g-6xhv'

A local authenticated user with control over a target account's home directory in Cockpit can exploit a privileged symlink dereference vulnerability in the ssh-add-public-key.sh helper. This vulnerability allows the attacker to manipulate symlinks within .ssh or authorized_keys paths, causing arbitrary changes to file ownership and permissions. This can lead to local privilege escalation and impact system integrity, confidentiality, and availability. Exploitation requires user interaction and elevated privileges, preventing remote or unauthenticated attacks.