GHSA-G3WG-6MCF-8JJ6 Local Temp Directory Hijacking Vulnerability

🗓️ 04 Nov 2020 17:50:24Reported by GoogleType

osv🔗 osv.dev👁 159 Views

Local Temp Directory Hijacking Vulnerability in Unix systems with potential privilege escalation through race condition when creating temporary subdirectories in a shared temp directory. Impact covers read and write permission to unpacked web apps, JSP files, and jar files. Vulnerable code includes WebAppContext::getTempDirectory and ServletContext attribute for tempdir

Reporter	Title	Published	Views	Family All 112
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is vulnerable to various attacks due to Eclipse jetty	21 Jun 202318:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in dependent libraries affect IBM® Db2® leading to denial of service or privilege escalation.	23 Jun 202118:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in eclipse jetty affect IBM Business Automation Workflow	3 Jun 202413:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics is affected by multiple vulnerabilities	15 Apr 202503:05	–	ibm
IBM Security Bulletins	Security Bulletin: An Eclipse Jetty vulnerability affects IBM Rational Functional Tester	27 Jan 202117:25	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Eclipse Jetty affects IBM Rational Service Tester (CVE-2020-27216)	25 Jan 202113:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in Eclipse Jetty affect IBM Security Directory Integrator	15 May 202400:45	–	ibm
IBM Security Bulletins	Security Bulletin: Eclipse Jetty (Publicly disclosed vulnerability) affects Content Classifaction	27 Nov 202018:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Storage Scale Hadoop Connector	1 Jan 202407:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	29 Jun 202123:59	–	ibm

Source	Link
github	www.github.com/eclipse/jetty.project/security/advisories/GHSA-g3wg-6mcf-8jj6
github	www.github.com/eclipse/jetty.project/security/advisories/GHSA-g3wg-6mcf-8jj6
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-27216
github	www.github.com/eclipse/jetty.project/issues/5451
github	www.github.com/github/codeql/pull/4473
lists	www.lists.apache.org/thread.html/raa9c370ab42d737e93bc1795bb6a2187d7c60210cd5e3b3ce8f3c484@%3Cissues.beam.apache.org%3E
lists	www.lists.apache.org/thread.html/rad255c736fad46135f1339408cb0147d0671e45c376c3be85ceeec1a@%3Cnotifications.zookeeper.apache.org%3E
lists	www.lists.apache.org/thread.html/rae15d73cabef55bad148e4e6449b05da95646a2a8db3fc938e858dff@%3Cissues.beam.apache.org%3E
lists	www.lists.apache.org/thread.html/raf9c581b793c30ff8f55f2415c7bd337eb69775aae607bf9ed1b16fb@%3Cdev.zookeeper.apache.org%3E
lists	www.lists.apache.org/thread.html/rafb023a7c61180a1027819678eb2068b0b60cd5c2559cb8490e26c81@%3Cissues.zookeeper.apache.org%3E

08 Jul 2026 05:59Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17

EPSS0.04352