Threats tagged 'ghsa-9424-vj6g-h5m7'

A vulnerability in sblim-cmpi-base allows local unprivileged users to perform a symlink attack via insecure temporary file creation in provider registration scripts. This can lead to overwriting root-owned files if the scripts run with elevated privileges, potentially disrupting system services. Exploitation requires the ability to create symlinks in world-writable directories and is conditional on privileged script execution. The issue may be mitigated by sticky-directory symlink protections.