Vendors / Cisofy Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Cisofy records in CISA KEV No Cisofy vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 34
Unspecified tests in Lynis before 2.5.0 allow local users to write to arbitrary files or possibly gain privileges via a symlink attack on a temporary file.
CVSS 3.0 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00426 · Published 2017-06-08 · No fix listed CWE-59
Priority LOW 19
CISOfy Lynis before 3.0.0 has Incorrect Access Control because of a TOCTOU race condition.
CVSS 3.1 MEDIUM 4.2· Local · Low privileges · User interaction · EPSS 0.00256 · Published 2020-06-18 · No fix listed CWE-367
Priority LOW 16
In CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by looking at the process list when a data upload is being performed.
CVSS 3.1 LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00365 · Published 2020-06-18 · No fix listed CWE-200
Priority LOW 16
include/tests_webservers in Lynis before 1.5.5 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis.*.unsorted file with an easily determined name.
CVSS 2.0 LOW 3.3· Local · No auth · Interaction — · EPSS 0.0034 · Published 2014-06-08 · No fix listed CWE-59
Priority LOW 16
include/tests_webservers in Lynis before 1.5.5 on AIX allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis.##### file.
CVSS 2.0 LOW 3.3· Local · No auth · Interaction — · EPSS 0.0034 · Published 2014-06-08 · No fix listed CWE-59
Open these records in search → All records by CVSS severity
0 1 1 3 0
THREATIST.IORead the docs