keycloak-httpd-client-install symlink attack vulnerability

MEDIUM 5.5CVE-2017-15111 · GHSA-vqf9-v3hc-wr54 · PYSEC-2026-829 · Published 20/01/2018 · updated 17/06/2026

In short

CVE-2017-15111 is a MEDIUM (CVSS 5.5) vulnerability affecting keycloak-httpd-client-install, keycloak-httpd-client-install (keycloak-httpd-client-install project).
Chance of exploitation in the next 30 days (EPSS): 0.39%, higher than 33.3% of all vulnerabilities.
Fix: update to 0.8 or later.

Package	Affected versions	Patched versions
keycloak-httpd-client-install PyPI	`< 0.8`	`0.8`
keycloak-httpd-client-install keycloak-httpd-client-install_project	`< 0.8`	`0.8`

Description

keycloak-httpd-client-install versions before 0.8 insecurely creates temporary file allowing local attackers to overwrite other files via symbolic link.

NVD description

keycloak-httpd-client-install versions before 0.8 insecurely creates temporary file allowing local attackers to overwrite other files via symbolic link.

References

nvd.nist.gov/vuln/detail/CVE-2017-15111 · ADVISORY
jdennis/keycloak-httpd-client-install commit 07f26e2 · WEB
access.redhat.com/errata/RHSA-2019:2137 · WEB
jdennis/keycloak-httpd-client-install · PACKAGE
pypi.org/project/keycloak-httpd-client-install · PACKAGE
GitHub Advisory GHSA-vqf9-v3hc-wr54 · ADVISORY

More vulnerabilities in keycloak-httpd-client-install

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

keycloak-httpd-client-install

PyPI

< 0.8

0.8

keycloak-httpd-client-install

keycloak-httpd-client-install_project

< 0.8

0.8

Description

keycloak-httpd-client-install versions before 0.8 insecurely creates temporary file allowing local attackers to overwrite other files via symbolic link.

NVD description

keycloak-httpd-client-install versions before 0.8 insecurely creates temporary file allowing local attackers to overwrite other files via symbolic link.