CWE Code: 59
Vulnerability Type: privilege_escalation
CVSS Score: 6.6
CWE Name:  Improper Link Resolution Before File Access ('Link Following')
Summary: deepin-clone before 1.1.3 uses a fixed path /tmp/repo.iso in the bootdoctor::fix() function to download an iso file, and follows symlinks there. an unprivileged user can prepare a symlink attack there to create or overwrite files in arbitrary file system locations. the content is not attacker controlled. by winning a race condition to replace the /tmp/repo.iso symlink by an attacker controlled iso file, further privilege escalation may be possible.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/COMPLETE/COMPLETE
Published Date: 2019-07-04
Last Modified Date: 2019-07-28