VULNERABILITY INTELLIGENCE
CVE-2015-1197
CVSS score1.9 LOW
EPSS probability2.91%
CISA KEVNot currently listed
Published2015-02-19
Last modified2026-10-14
CVSS vectorAV:L/AC:M/Au:N/C:N/I:P/A:N
Description
cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.