Information Disclosure

datadog-api-client is vulnerable to information disclosure. The vulnerability exists through the function prepareDownloadFile creating a temporary file with the permissions bits of -rw-r--r-- and the function downloadFileFromResponse method downloading sensitive files into temporary directory...

PT-2021-2347

Name of the Vulnerable Software and Affected Versions Datadog API Client versions prior to 1.0.0-beta.9 Description The issue is related to the creation of temporary files with insecure permissions by the prepareDownloadFilecreates method, allowing local information disclosure of sensitive...