Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
cisofy lynis vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2014-3986
include/tests_webservers in Lynis prior to 1.5.5 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis.*.unsorted file with an easily determined name.
Cisofy Lynis
Cisofy Lynis 1.5.2
Cisofy Lynis 1.5.0
Cisofy Lynis 1.5.3
Cisofy Lynis 1.5.1
NA
CVE-2014-3982
include/tests_webservers in Lynis prior to 1.5.5 on AIX allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis.##### file.
Cisofy Lynis 1.5.3
Cisofy Lynis 1.5.2
Cisofy Lynis 1.5.1
Cisofy Lynis 1.5.0
Cisofy Lynis
7.8
CVSSv3
CVE-2017-8108
Unspecified tests in Lynis prior to 2.5.0 allow local users to write to arbitrary files or possibly gain privileges via a symlink attack on a temporary file.
Cisofy Lynis
4.2
CVSSv3
CVE-2020-13882
CISOfy Lynis prior to 3.0.0 has Incorrect Access Control because of a TOCTOU race condition. The routine to check the log and report file permissions was not working as intended and could be bypassed locally. Because of the race, an unprivileged attacker can set up a log and repo...
Cisofy Lynis
Fedoraproject Fedora 31
Fedoraproject Fedora 32
3.3
CVSSv3
CVE-2019-13033
In CISOfy Lynis 2.x up to and including 2.7.5, the license key can be obtained by looking at the process list when a data upload is being performed. This license can be used to upload data to a central Lynis server. Although no data can be extracted by knowing the license key, it...
Cisofy Lynis
Debian Debian Linux 8.0
Debian Debian Linux 9.0
Fedoraproject Fedora 30
Fedoraproject Fedora 31
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48693
CVE-2024-30851
CVE-2024-34460
CVE-2024-2887
local
CVE-2024-27956
remote code execution
CVE-2024-34475
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started