VULNERABILITY INTELLIGENCE
CVE-2018-19637
CVSS score2.8 LOW
EPSS probability0.46%
CISA KEVNot currently listed
Published2019-03-05
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Description
Supportutils, before version 3.1-5.7.1, wrote data to static file /tmp/supp_log, allowing local attackers to overwrite files on systems without symlink protection
Weakness classification
- CWE-59: Improper Link Resolution Before File Access ('Link Following')
- CWE-377: Insecure Temporary File