| Package | Affected versions | Patched versions |
|---|---|---|
| opencryptoki | = 2.2.3= 2.2.4= 2.2.4.1= 2.2.5= 2.2.6= 2.2.7= 2.2.8= 2.3.0= 2.3.1= 2.3.2= 2.3.3≤ 2.4 |
openCryptoki before 2.4.1, when using spinlocks, allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) .pkapi_xpk or (2) .pkcs11spinloc file in /tmp.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free