CAPEC-132 Symlink Attack

abstraction: detailedstatus: active

An adversary positions a symbolic link in such a manner that the targeted user or application accesses the link's endpoint, assuming that it is accessing a file with the link's name.

likelihood: Lowseverity: High
01

weaknesses (1)

The CWE weakness classes this flaw belongs to.

02

ATT&CK techniques

ATT&CK techniques this enables or maps to.

03

related attack patterns (1)

Related entries.

04

source

Where this definition is published.