CWE-65 Windows Hard Link
variantThe product, when opening a file or directory, does not sufficiently handle when the name is associated with a hard link to a target that is outside of the intended control sphere. This could allow an attacker to cause the product to operate on unauthorized files.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (10)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-19231US | high7.8 | Exploit | ||
An insecure file access vulnerability exists in CA Client Automation 14.0, 14.1, 14.2, and 14.3 Agent for Windows that can allow a local attacker to gain escalated privileges. | ||||
| CVE-2019-8452US | high7.8 | Exploit | ||
A hard-link created from log file archive of Check Point ZoneAlarm up to 15.4.062 or Check Point Endpoint Security client for Windows before E80.96 to any file on the system will g… | ||||
| CVE-2020-6013US | high8.8 | — | ||
ZoneAlarm Firewall and Antivirus products before version 15.8.109.18436 allow an attacker who already has access to the system to execute code at elevated privileges through a comb… | ||||
| CVE-2022-23742US | high7.8 | — | ||
Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges. An attacker can replace those f… | ||||
| CVE-2020-1467US | high7.2 | — | ||
An elevation of privilege vulnerability exists when Windows improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file… | ||||
| CVE-2021-1091US | high7.1 | — | ||
NVIDIA GPU Display driver for Windows contains a vulnerability where an unprivileged user can create a file hard link that causes the driver to overwrite a file that requires eleva… | ||||
| CVE-2019-8454US | high7.0 | — | ||
A local attacker can create a hard-link between a file to which the Check Point Endpoint Security client for Windows before E80.96 writes and another BAT file, then by impersonatin… | ||||
| CVE-2019-8455US | high7.1 | — | ||
A hard-link created from the log file of Check Point ZoneAlarm up to 15.4.062 to any file on the system will get its permission changed so that all users can access that linked fil… | ||||
| CVE-2026-70019US | medium6.5 | — | ||
Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network. | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan