CWE Code: 22
Vulnerability Type: privilege_escalation
CVSS Score: 9.3
CWE Name:  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Summary: a directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. if an attacker controls a repository, they may be able to copy files outside of the destination directory on the targeted system via path traversal. if reposync is running with heightened privileges on a targeted system, this flaw could potentially result in system compromise via the overwriting of critical system files. version 1.1.31 and older are believed to be affected.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2018-08-01
Last Modified Date: 2018-11-30