TencentOS Server 4: storm (TSSA-2024:1013)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:1013 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2023-43123

On unix-like systems, the temporary directory is shared between all user. As such, writing to this directory using APIs that do not explicitly set the file/directory permissions can lead to information disclosure. Of note, this does not impact modern MacOS Operating Systems. The method...

org.apache.atlas:storm-bridge (>=2.4.0 <=2.5.0), org.apache.atlas:storm-bridge-shim (>=2.4.0 <=2.5.0) potentially affected by CVE-2023-43123 via org.apache.storm:storm-core (=2.4.0)

org.apache.storm:storm-core MAVEN version =2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.storm:storm-core and may be impacted: - org.apache.atlas:storm-bridge =2.4.0, =2.4.0, =2.5.0 Source cves: CVE-2023-43123 Source advisory:...

CVE-2023-43123

CVE-2023-43123 affects Apache Storm (Storm-core) on Unix-like systems where a shared temporary directory can allow other local users to read sensitive data written by temp files created via File.createTempFile (permissions -rw-r--r-- by default). The issue is triggered when the system property 'j...