CWE-378: Creation of Temporary File With Insecure Permissions
Opening temporary files without appropriate measures or controls can leave the file, its contents and any function that it impacts vulnerable to attack.
From the CWE List. © The MITRE Corporation.
Newest
- datadog datadog-api-client-javaDataDog API Client contains a Local Information Disclosure Vulnerability3.0 Low
- netty, debian linux, netapp active iq unified manager +10 more +12 moreLocal Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files6.2 Medium
- google guava, netapp active iq unified manager, oracle commerce guided search +10 more +12 moreTemp directory permission issue in Guava3.3 Low
- eclipse jetty, the eclipse foundation eclipse jetty, apache beam +16 more +18 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.0 High
- forescout secureconnector, microsoft windows secureconnector agent +1 moreOn Windows endpoints, the SecureConnector agent is vulnerable to privilege escalation whereby an authenticated unprivileged user can obtain administrator privileges on the endpoint because it fails to…7.8 High
- logilab logilab-common, opensuse +1 moreCreation of Temporary File With Insecure Permissions in logilab-commons4.4 Medium