SWHKD 1.1.5 allows arbitrary file-existence tests via the -c option.
The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.
Link | Tags |
---|---|
https://github.com/waycrate/swhkd/releases | third party advisory release notes |
https://www.openwall.com/lists/oss-security/2022/04/14/1 | mailing list third party advisory exploit |