Symlink Attack Affecting oath_toolkit package, versions [2.6.7,2.6.12)
Threat Intelligence
Exploit Maturity
Proof of concept
EPSS
0.04% (15th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-UNMANAGED-OATHTOOLKIT-8172652
- published 9 Oct 2024
- disclosed 9 Oct 2024
- credit Fabian Vogt
Introduced: 9 Oct 2024
CVE-2024-47191 Open this link in a new tabHow to fix?
Upgrade oath_toolkit to version 2.6.12 or higher.
Overview
Affected versions of this package are vulnerable to Symlink Attack in usersfile.c in the PAM module, which does expands ${HOME} and ${USER} as path elements when processing the OTP state file, AKA usersfile, as root. This allows an attacker to elevate privileges by exploiting the use of fchown in the presence of a symlink.