CWE-243 - Creation of chroot Jail Without Changing Working Directory

Description

The product uses the chroot() system call to create a jail, but does not change the working directory afterward. This does not prevent access to files outside of the jail.

Latest vulnerabilities for CWE-243

No vulnerabilities found using your search criteria

References

Description of CWE-243 on Mitre website