CVE-2016-7490

2016-11-1016:00:00

larry_cashdollar

www.cve.org

EPSS

Percentile

5.1%

JSON

The installation script studioexpressinstall for Teradata Studio Express 15.12.00.00 creates files in /tmp insecurely. A malicious local user could create a symlink in /tmp and possibly clobber system files or perhaps elevate privileges.

CNA Affected

[
  {
    "product": "Studio Express",
    "vendor": "Teradata",
    "versions": [
      {
        "status": "affected",
        "version": "15.12.00.00"
      }
    ]
  }
]

References

www.securityfocus.com/bid/94255

www.vapidlabs.com/advisory.php?v=174

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2016-7490