CVE-2012-4454

CVE-2012-4454 describes a local privilege escalation vulnerability in openCryptoki versions prior to 2.4.1. The flaw allows local attackers to create or modify arbitrary files with world-writable permissions through a symlink attack on temporary files, specifically .pkapi_xpk or .pkcs11spinloc. With a CVSS score of 2.9, this vulnerability has a low severity, requiring adjacent network access and medium attack complexity, resulting in a partial impact to integrity. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.