CVE-2017-15111

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2017-15111

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-15111.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2017-15111

Aliases

GHSA-vqf9-v3hc-wr54

Downstream

RHSA-2019:2137

Published

2018-01-20T00:29:00.467Z

Modified

2025-11-20T10:38:05.234327Z

Severity

5.5 (Medium) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVSS Calculator

Summary

[none]

Details

keycloak-httpd-client-install versions before 0.8 insecurely creates temporary file allowing local attackers to overwrite other files via symbolic link.

References

Affected packages

Git / github.com/jdennis/keycloak-httpd-client-install

Affected ranges

Type: GIT
Repo: https://github.com/jdennis/keycloak-httpd-client-install
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

07f26e213196936fb328ea0c1d5a66a09d8b5440

Affected versions

Other

RELEASE_0_1

RELEASE_0_2

RELEASE_0_3

RELEASE_0_4

RELEASE_0_5

RELEASE_0_6

RELEASE_0_7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-15111.json"