script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root execute the script command.
No PoCs from references.
- https://github.com/Shubhamthakur1997/CICD-Demo
- https://github.com/dcambronero/CloudGuard-ShiftLeft-CICD-AWS
- https://github.com/jaydenaung/CloudGuard-ShiftLeft-CICD-AWS
- https://github.com/tp1-SpZIaPvBD/testprojekt