Lucene search
+L

6 matches found

OSV
OSV
•added 2025/01/09 1:15 a.m.•22 views

CVE-2023-38037

ActiveSupport::EncryptedFile writes contents that will be encrypted to a temporary file. The temporary file's permissions are defaulted to the user's current umask settings, meaning that it's possible for other users on the same system to read the contents of the temporary file. Attackers that ha...

5.3AI score
SaveExploits0References2
NVD
NVD
•added 2025/01/09 1:15 a.m.•34 views

CVE-2023-38037

ActiveSupport::EncryptedFile writes contents that will be encrypted to a temporary file. The temporary file's permissions are defaulted to the user's current umask settings, meaning that it's possible for other users on the same system to read the contents of the temporary file. Attackers that ha...

5.5CVSS0.00274EPSS
SaveExploits0References2
OSV
OSV
•added 2025/01/09 1:15 a.m.•2 views

DEBIAN-CVE-2023-38037

ActiveSupport::EncryptedFile writes contents that will be encrypted to a temporary file. The temporary file's permissions are defaulted to the user's current umask settings, meaning that it's possible for other users on the same system to read the contents of the temporary file. Attackers that ha...

5.5CVSS5.3AI score0.00274EPSS
SaveExploits0References1
OSV
OSV
•added 2025/01/09 1:15 a.m.•12 views

UBUNTU-CVE-2023-38037

ActiveSupport::EncryptedFile writes contents that will be encrypted to a temporary file. The temporary file's permissions are defaulted to the user's current umask settings, meaning that it's possible for other users on the same system to read the contents of the temporary file. Attackers that ha...

5.5CVSS6AI score0.00274EPSS
SaveExploits0References6
Mend
Mend
•added 2025/01/09 12:33 a.m.•2 views

CVE-2023-38037

ActiveSupport::EncryptedFile writes contents that will be encrypted to a temporary file. The temporary file's permissions are defaulted to the user's current "umask" settings, meaning that it's possible for other users on the same system to read the contents of the temporary file. Attackers that...

5.5CVSS0.00274EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/09 12:00 a.m.•4 views

CVE-2023-38037: Incorrect Permission Assignment for Critical Resource

ActiveSupport::EncryptedFile writes contents that will be encrypted to a temporary file. The temporary file's permissions are defaulted to the user's current umask settings, meaning that it's possible for other users on the same system to read the contents of the temporary file. Attackers that ha...

5.5CVSS5.9AI score0.00274EPSS
SaveExploits0References1
Rows per page
Query Builder