CVE-2010-2199

CVE-2010-2199 describes a vulnerability in RPM versions 4.8.0 and earlier, where improper metadata resetting during package upgrades or removals could allow local users to bypass access restrictions. This is achieved by creating a hard link to a file with a POSIX ACL, similar to CVE-2010-2059. The vulnerability has a CVSS score of 7.2 (High), indicating a local attack vector with low complexity and high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.