[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCAaVmiJrCowqILPAGn_qeW_0ZCxNK0MY20hAJLyBpaY":3,"g5a-risk:CVE-2016-9595":140},{"success":4,"data":5,"meta":138},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":15,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":64,"references":65,"referencesCount":76,"weaknesses":77,"weaknessesCount":76,"isActivelyExploited":92,"cisaInfo":15,"otxData":15,"relatedBlogPosts":93,"seoMetadata":94,"configurations":119,"relatedVendorCves":136,"notableEvents":137},"CVE-2016-9595","What is CVE-2016-9595?","A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files.","A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files. A local user could exploit this flaw to con...","2018-07-27T18:29:00.237","2023-11-07T02:37:14.767",5.5,"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":39,"CVSSMetricV40":15},null,[17,30],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":26,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","LOCAL","LOW","NONE","UNCHANGED","HIGH","MEDIUM",1.8,3.6,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":37,"ImpactScore":38},"53f830b8-0a3f-465b-8143-3b8a9948e749","Secondary",{"Version":21,"VectorString":34,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":35,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":36,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H","REQUIRED",7.3,1.3,5.9,[40],{"Source":18,"Type":19,"CVSSData":41,"BaseSeverity":23,"ExploitabilityScore":45,"ImpactScore":46,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":42,"VectorString":43,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":24,"IntegrityImpact":44,"AvailabilityImpact":44,"BaseScore":29,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:N\u002FI:P\u002FA:P","PARTIAL",3.9,4.9,0.00403,[47,47,47,47,47,47,47],"Medium",[51,56,61],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"theforeman","katello","*","cpe:2.3:a:theforeman:katello:*:*:*:*:*:*:*:*",{"vendor":57,"product":58,"version":59,"criteria":60,"vulnerable":4},"redhat","satellite","6.3","cpe:2.3:a:redhat:satellite:6.3:*:*:*:*:*:*:*",{"vendor":57,"product":62,"version":59,"criteria":63,"vulnerable":4},"satellite_capsule","cpe:2.3:a:redhat:satellite_capsule:6.3:*:*:*:*:*:*:*",3,[66,71],{"url":67,"source":68,"tags":69},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:0336","Red Hat",[70],"Third Party Advisory",{"url":72,"source":68,"tags":73},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=CVE-2016-9595",[74,75,70],"Issue Tracking","Patch",2,[78,86],{"id":79,"name":80,"description":81,"extendedDescription":82,"status":83,"abstraction":84,"structure":85},"CWE-377","Insecure Temporary File","Creating and using insecure temporary files can leave application and system data vulnerable to attack.","","Incomplete","Class","Simple",{"id":87,"name":88,"description":89,"extendedDescription":82,"status":90,"abstraction":91,"structure":85},"CWE-59","Improper Link Resolution Before File Access ('Link Following')","The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.","Draft","Base",false,[],{"title":95,"metaDescription":96,"keywords":97,"canonicalUrl":98,"structuredData":99},"What is CVE-2016-9595? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2016-9595, a medium severity cyber security vulnerability from 2018. A flaw was found in katello-debug before 3.4.0 where certa...","CVE-2016-9595, CVE-2016-9595 vulnerability, CVE-2016-9595 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, theforeman security, redhat security, katello vulnerability, satellite vulnerability, satellite_capsule vulnerability","\u002Fwhat-is\u002Fcve-2016-9595",{"@context":100,"@type":101,"headline":95,"description":96,"datePublished":10,"dateModified":11,"author":102,"publisher":106,"about":110,"mainEntityOfPage":114,"articleSection":117,"keywords":118},"https:\u002F\u002Fschema.org","TechArticle",{"@type":103,"name":104,"url":105},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":103,"name":104,"url":105,"logo":107},{"@type":108,"url":109},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":111,"name":6,"description":112,"additionalType":113},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":115,"@id":116},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2016-9595","Cybersecurity","CVE-2016-9595, CVE-2016-9595 vulnerability, CVE-2016-9595 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[120,128],{"Operator":15,"Negate":15,"Nodes":121},[122],{"Operator":123,"Negate":15,"CPEMatch":124},"OR",[125],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":126,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":127,"VersionEndIncluding":15},"69D680DE-9A25-4132-BC2F-7C8F58298437","3.4.0",{"Operator":15,"Negate":15,"Nodes":129},[130],{"Operator":123,"Negate":15,"CPEMatch":131},[132,134],{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":133,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"87F6E32E-6AF3-489A-AFEF-D5309E0D1779",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":135,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"85FB21E6-FFBC-4286-959E-7418C6A356E9",[],[],{"lastModified":11,"cacheTime":139,"version":42},1792256775764,{"score":141,"band":49,"action":142,"scoredAt":143},45,"Plan remediation","2026-10-16T06:44:39.023876+00:00"]