CVE-2021-28168

Eclipse Jersey 2.28 to 2.33 and Eclipse Jersey 3.0.0 to 3.0.1 contains a local information disclosure vulnerability. This is due to the use of the File.createTempFile which creates a file inside of the system temporary directory with the permissions: -rw-r--r--. Thus the contents of this file are...

CVE-2021-28168

CVE-2021-28168 affects Eclipse Jersey 2.28–2.33 and 3.0.0–3.0.1, where File.createTempFile creates a world-readable file in the system temp directory (-rw-r--r--). Local attackers could view sensitive contents. The connected IBM PEM advisory confirms disclosure risk and notes fixes via updated Je...

PT-2021-7916

Name of the Vulnerable Software and Affected Versions Eclipse Jersey versions 2.28 through 2.33 Eclipse Jersey versions 3.0.0 through 3.0.1 Description The issue is related to the creation of temporary files with insecure permissions, potentially allowing an attacker to disclose protected...

CVE-2021-28168: Creation of Temporary File With Insecure Permissions

Eclipse Jersey 2.28 to 2.33 and Eclipse Jersey 3.0.0 to 3.0.1 contains a local information disclosure vulnerability. This is due to the use of the File.createTempFile which creates a file inside of the system temporary directory with the permissions: -rw-r--r--. Thus the contents of this file are...

CVE-2021-28100

Priam uses File.createTempFile, which gives the permissions on that file -rw-r--r--. An attacker with read access to the local filesystem can read anything written there by the Priam process...

CVE-2021-28100

Summary: Priam creates temporary files with permissions -rw-r--r-- via File.createTempFile, enabling a local attacker with read access to view contents written by Priam. The discloseable data could reside in files created during backup/restore processes. Affected locations include MetaData.java, ...

CVE-2021-28100

Priam uses File.createTempFile, which gives the permissions on that file -rw-r--r--. An attacker with read access to the local filesystem can read anything written there by the Priam process...

PT-2021-17744

Name of the Vulnerable Software and Affected Versions: Priam affected versions not specified Description: The issue arises from Priam's use of File.createTempFile, which sets the permissions on the created file to -rw-r--r--, allowing other users with read access to the local filesystem to read t...

CVE-2021-28100: Undefined Security Weakness

Priam uses File.createTempFile, which gives the permissions on that file -rw-r--r--. An attacker with read access to the local filesystem can read anything written there by the Priam process...

Privilege Escalation

swagger-generator is vulnerable to privilege escalation. The use of method File.createTempFile allows an attacker to append the contents of the outputFolder, thereby leading to an execution of attacker controlled code if the code is written to this directory...

PT-2021-14445

Name of the Vulnerable Software and Affected Versions swagger-codegen versions prior to 2.4.19 Description The system's temporary directory is shared between all users on Unix-like systems, allowing a collocated user to observe and race to complete the creation of a temporary subdirectory. This i...

PT-2021-5819

Name of the Vulnerable Software and Affected Versions Netty versions prior to 4.1.77.Final Description The issue is related to the creation of temporary files with insecure permissions in Netty, an open-source network application framework. When Netty's multipart decoders are used, local...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2012:0828-1)

This version upgrade of java-160-openjdk fixes multiple security flaws : - S7079902, CVE-2012-1711: Refine CORBA data models - S7143606, CVE-2012-1717: File.createTempFile should be improved for temporary files created by the platform. - S7143614, CVE-2012-1716: SynthLookAndFeel stability...

SuSE 11.1 Security Update : java-1_6_0-openjdk (SAT Patch Number 6437)

java-160-openjdk was updated to the IcedTea 1.11.3 release, fixing multiple security issues : - S7079902, CVE-2012-1711: Refine CORBA data models - S7143606, CVE-2012-1717: File.createTempFile should be improved for temporary files created by the platform. - S7143614, CVE-2012-1716:...

Fedora 16 : java-1.6.0-openjdk-1.6.0.0-67.1.11.3.fc16 (2012-9545)

Security fixes S7079902, CVE-2012-1711: Refine CORBA data models S7110720: Issue with vm config file loadingIssue with vm config file loading S7143606, CVE-2012-1717: File.createTempFile should be improved for temporary files created by the platform. S7143614, CVE-2012-1716: SynthLookAndFeel...

Fedora 16 : java-1.7.0-openjdk-1.7.0.3-2.2.1.fc16.7 (2012-9593)

S7079902, CVE-2012-1711: Refine CORBA data models S7110720: Issue with vm config file loadingIssue with vm config file loading S7143606, CVE-2012-1717: File.createTempFile should be improved for temporary files created by the platform. S7143614, CVE-2012-1716: SynthLookAndFeel stability improveme...

openSUSE Security Update : java-1_6_0-openjdk (java-1_6_0-openjdk-578)

OpenJDK Java 1.6.0 was upgraded to build b14, fixing quite a lot of security issues. It fixes at least: 4486841 UTF8 decoder should adhere to corrigendum to Unicode 3.0.1 CVE-2008-5351 6484091 FileSystemView leaks directory info CVE-2008-5350 aka SUN SOLVE 246266 6497740 Limit the size of RSA...