CWE-379: Creation of Temporary File in Directory with Insecure Permissions
The product creates a temporary file in a directory whose permissions allow unintended actors to determine the file's existence or otherwise access that file.
From the CWE List. © The MITRE Corporation.
Newest
- vmware spring bootTemporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot7.8 High
- adobe creative cloud desktop application, gocart +1 moreAdobe Creative Cloud DLL Hijacking Local Application Denial of Service4.2 Medium
- adobe genuine service, gocart +1 moreAdobe Genuine Service Installer Privilege Escalation Vulnerability7.3 High
- adobe digital editionsAdobe Digital Editions Installer flaw leads to Local Privilege Escalation5.8 Medium
- adobe digital editionsAdobe Digital Editions Installer flaw leads to Arbitrary File System Write6.5 Medium
- adobe creative cloud desktop application, creative cloud (desktop component) +1 moreAdobe Creative Cloud Arbitrary File Overwrite Vulnerability7.4 High
- adobe genuine service, gocart +1 moreAdobe Genuine Services insecure file permission could lead to privilege escalation5.8 Medium
- adobe captivateAdobe Captivate Installer Creation of Temporary File In Directory With Incorrect Permissions Could Lead To Privilege Escalation5.0 Medium
- adobe creative cloud desktop application, creative cloud (desktop component) +1 moreAdobe Creative Cloud Installer Arbitrary File Write6.1 Medium
- adobe premiere, premiere elements +1 moreAdobe Premiere Elements Privilege Escalation Vulnerability6.2 Medium
- adobe photoshop elementsAdobe Photoshop Elements Privilege Escalation Vulnerability - symbolic link6.2 Medium
- openapi-generator openapi generator, openapitools openapi-generator +1 moreCreation of Temporary File in Directory with Insecure Permissions in auto-generated Java, Scala code6.2 Medium
- openapi-generator openapi generator, openapitools openapi-generator +1 moreCreation of Temporary File in Directory with Insecure Permissions in the OpenAPI-Generator online generator9.3 Critical
com.vaadin:flow-serverMavenInsecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-196.3 Medium- flow flow-server, vaadin flow, vaadin +2 moreInsecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-196.3 Medium
- openapi-generator openapi generator, openapitools openapi-generator +1 moreCreation of Temporary File in Directory with Insecure Permissions in the OpenAPI Generator Maven plugin4.0 Medium
- eclipse jersey, the eclipse foundation eclipse jersey, oracle communications cloud native core policy +1 more +3 moreLocal information disclosure via system temporary directory6.2 Medium
- adobe digital editionsAdobe Digital Editions Arbitrary file system write vulnerability7.8 High
- gradle, quarkus +1 moreLocal privilege escalation through system temporary directory8.8 High
- adobe creative cloud desktop application, creative cloud (desktop component) +1 moreAdobe Creative Cloud installer arbitrary file overwrite vulnerability6.1 Medium
- smartbear swagger-codegenGenerator Web Application: Local Privilege Escalation Vulnerability via System Temp Directory5.3 Medium
- datadog datadog-api-client-javaDataDog API Client contains a Local Information Disclosure Vulnerability3.0 Low
- netty, debian linux, netapp active iq unified manager +10 more +12 moreLocal Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files6.2 Medium
- apache groovy, atlas, netapp snapcenter +18 more +20 moreInformation Disclosure in Apache Groovy5.5 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, apache beam +16 more +18 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.0 High
- apache ant, fedoraproject fedora, gradle +34 more +36 moreCode injection in Apache Ant7.5 High
- apport project apport, canonical ubuntu linux +1 moreWorld writable root owned lock file created in user controllable location6.5 Medium
- forescout secureconnector, microsoft windows secureconnector agent +1 moreOn Windows endpoints, the SecureConnector agent is vulnerable to privilege escalation whereby an authenticated unprivileged user can obtain administrator privileges on the endpoint because files are c…7.8 High
- redhat packstack, red hat openstack folsom for rhel 6, enterprise linux openstack platform 5 (icehouse) +3 more +5 morePackstack: red hat openstack: packstack: unauthorized system modification via insecure answer file creation6.1 Medium
- moodleMoodle Double-Caches Content, Potentially Writing to a File System's Tmp Directory6.4 Medium