CWE-378: Creation of Temporary File With Insecure Permissions
Opening temporary files without appropriate measures or controls can leave the file, its contents and any function that it impacts vulnerable to attack.
From the CWE List. © The MITRE Corporation.
Newest
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 more Flatpak: flatpak: world-writable temporary child repositories in system-helper cache path 3.9 Low
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 more Flatpak: flatpak: world-readable oci authentication token in system-helper cache path 3.2 Low
- qualcomm software center, qualcomm, inc. snapdragon +1 more Creation of Temporary File with Insecure Permissions in Qualcomm Software Center 8.8 High
- osquery osquery: Unprivileged users can temporarily read file carve contents 4.4 Medium
- lfprojects mlflow, mlflow mlflow/mlflow +1 more Incomplete Fix for CVE-2025-10279: Insecure Temporary Directory Permissions in mlflow/mlflow 7.0 High
- enter software iperius backup Enter Software Iperius Backup Backup Service temp file 7.3 High
- openclaw OpenClaw < 2026.2.17 - Insufficient File Permissions in Session Transcript Files 6.8 Medium
- vmware spring data geode, spring data gemfire +1 more Spring Data Geode Insecure Temporary Directory Usage 4.8 Medium
- dell supportassist os recovery Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File... 7.5 High
- dell supportassist os recovery,, supportassist os recovery +1 more Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File... 6.6 Medium
- jumpcloud inc. remote assist JumpCloud Remote Assist < 0.317.0 Arbitrary File Write/Delete via Insecure Temp Directory 8.5 High
- run-llama run-llama/llama index Insecure Temporary File Handling in run-llama/llama_index 7.3 High
- mihomo party Mihomo Party Socket sysproxy.ts enableSysProxy temp file 2.0 Low
- No product listed Insecure permissions in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0... 6.5 Medium
- dell supportassist os recovery Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contain a Creation of Temporary File... 7.8 High
- netscout ngeniusone NETSCOUT nGeniusONE before 6.4.0 b2350 allows Arbitrary File Creation by authenticated users. 6.5 Medium
- nixos nixpkgs Local privilege escalation in make-initrd-ng 8.8 High
- gradle Gradle vulnerable to local privilege escalation through system temporary directory 8.8 High
- dell nativeedge, nativeedge orchestrator +1 more Dell NativeEdge, version(s) 2.1.0.0, contain(s) a Creation of Temporary File With Insecure... 6.5 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +7 more +9 more Podman: build context bind mount 7.4 High
- zefr0x foxmarks Insecure Temporary File in `foxmarks` 2.4 Low
- apache hadoop Apache Hadoop: Temporary File Local Information Disclosure 6.2 Medium
- getscreen, getscreen agent, point b ltd getscreen agent +2 more Point B Ltd Getscreen Agent MSI Installer getscreen.msi temp file 8.5 High
- splashtop streamer The MSI installer for Splashtop Streamer for Windows before 3.5.8.0 uses a temporary folder with... 7.8 High
- entrust datacard xps card printer driver Insecure permissions in Entrust Datacard XPS Card Printer Driver 8.4 and earlier allows... 8.4 High
- talelin lin-cms-java-core Insecure Permissions vulnerability in lin-CMS v.0.2.0 and before allows a remote attacker to... 7.5 High
- siemens sinema remote connect server A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1).... 9.3 Critical
- jumpcloud JumpCloud Agent before 1.178.0 Creates a Temporary File in a Directory with Insecure Permissions.... 5.9 Medium
- sgi performance co-pilot, red hat enterprise linux 6, enterprise linux 7 +3 more +5 more Pcp: unsafe use of directories allows pcp to root privilege escalation 6.0 Medium
- zoom, zoom video communications, inc. for macos client +1 more Zoom for MacOSclients prior to 5.14.0 contain an improper access control vulnerability. A... 5.2 Medium
- siemens scalance lpe9403, scalance lpe9403 firmware +1 more A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The `i2c` mutex... 3.3 Low
- quarkus RestEasy Reactive implementation of Quarkus allows Creation of Temporary File With Insecure Permissions 3.3 Low
- red hat resteasy, netapp active iq unified manager, oncommand workflow automation +2 more Insecure Temporary File in RESTEasy 5.5 Medium
- netty, netapp active iq unified manager, oncommand workflow automation +2 more +4 more Local Information Disclosure Vulnerability in io.netty:netty-codec-http 5.5 Medium
- dell powerscale onefs, emc powerscale onefs +1 more Dell PowerScale OneFS 8.2.2 and above contain an elevation of privilege vulnerability. A local... 7.8 High
- avaya aura device services, aura devices services +1 more Avaya Aura Device Services Arbitrary Code Execution Vulnerability 6.2 Medium
- openapi-generator openapi generator, openapitools openapi-generator +1 more Creation of Temporary File in Directory with Insecure Permissions in auto-generated Java, Scala code 6.2 Medium
- openapi-generator openapi generator, openapitools openapi-generator +1 more Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI-Generator online generator 9.3 Critical
- cisco anyconnect secure mobility client Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities 7.0 High
- cisco anyconnect secure mobility client Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities 7.0 High
- cisco anyconnect secure mobility client Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities 7.0 High
- cisco anyconnect secure mobility client Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities 7.0 High
- cisco anyconnect secure mobility client Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities 7.0 High
- cisco anyconnect secure mobility client Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities 7.0 High
- openapi-generator openapi generator, openapitools openapi-generator +1 more Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI Generator Maven plugin 4.0 Medium
- eclipse jersey, the eclipse foundation eclipse jersey, oracle communications cloud native core policy +1 more +3 more Local information disclosure via system temporary directory 6.2 Medium
- gradle, quarkus +1 more Local privilege escalation through system temporary directory 8.8 High
- suse hawk2, linux enterprise high availability 12-sp3, linux enterprise high availability 12-sp5 +1 more +3 more hawk: Insecure file permissions 7.8 High
- smartbear swagger-codegen Generator Web Application: Local Privilege Escalation Vulnerability via System Temp Directory 5.3 Medium
- smartbear swagger-codegen Generated Code Contains Local Information Disclosure Vulnerability 5.3 Medium
- Show olderLoading…