F-Secure Total Link Following Local Privilege Escalation Vulnerability

F-Secure Total Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of F-Secure Total. User interaction on the part of an administrator is required to exploit this vulnerability. The specific flaw exists within the WithSecure plugin hosting service. By creating a symbolic link, an attacker can abuse the service to create a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-23005.

N/A

在文件访问前对链接解析不恰当(链接跟随)

F-Secure Total 后置链接漏洞

F-Secure Total是芬兰芬氏安全（F-Secure）公司的一个在线保护程序。 F-Secure Total存在后置链接漏洞，该漏洞源于WithSecure插件托管服务的符号链接处理不当，可能导致本地攻击者利用管理员用户交互来提升权限，并在SYSTEM环境中执行任意代码。

N/A

N/A