CVE-2021-41989

Qlik QlikView through 12.60.20100.0 creates a Temporary File in a Directory with Insecure Permissions...

CVE-2021-41988

Qlik NPrinting Designer through 21.14.3.0 creates a Temporary File in a Directory with Insecure Permissions...

CVE-2021-41988

Qlik NPrinting Designer through 21.14.3.0 creates a Temporary File in a Directory with Insecure Permissions...

PT-2023-12393 · Qlik · Qlikview

Name of the Vulnerable Software and Affected Versions: Qlik QlikView versions prior to 12.60.20100.0 Description: The issue allows the creation of a temporary file in a directory with insecure permissions. Recommendations: For versions prior to 12.60.20100.0, update to version 12.60.20100.0 or...

CVE-2021-41989

Qlik QlikView through 12.60.20100.0 creates a Temporary File in a Directory with Insecure Permissions...

Quarkus 安全漏洞

Quarkus is a cloud-native Linux container-first framework for writing Java applications. A security vulnerability exists in Quarkus that stems from insecure permissions on its temp file...

CVE-2021-41988

CVE-2021-41988 affects Qlik NPrinting Designer up to version 21.14.3.0. The issue arises from the application creating a temporary file in a directory with insecure permissions, which could allow unauthorized access or modification of sensitive data. Public references in connected documents confi...

Insecure Permissions

org.keycloak:keycloak-parent is vulnerable to Insecure Permissions. An attacker is able to shadow other users with the same email and impersonate or lockout the victim due to the email trust not being handled correctly...

CVE-2023-22947

Insecure folder permissions in the Windows installation path of Shibboleth Service Provider SP before 3.4.1 allow an unprivileged local attacker to escalate privileges to SYSTEM via DLL planting in the service executable's folder. This occurs because the installation goes under C:\opt rather than...

Information Disclosure

org.apache.james:james-server-core is vulnerable to Information Disclosure. A local attacker is able to access private user data in transit due to the use of temporary files with insecure permissions which includes in the SMTP stack and IMAP APPEND command's vulnerable components, resulting in...

CVE-2022-45935

Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit. Vulnerable components includes the SMTP stack and IMAP APPEND command. This issue affects Apache James server version 3.7.2 and prior versions...

GHSA-V6VP-62VC-84QW Apache James server allows an attacker with local access to access private user data in transit

Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit. Vulnerable components includes the SMTP stack and IMAP APPEND command. This issue affects Apache James server version 3.7.2 and prior versions...

Apache James server allows an attacker with local access to access private user data in transit

Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit. Vulnerable components includes the SMTP stack and IMAP APPEND command. This issue affects Apache James server version 3.7.2 and prior versions...

CVE-2022-45935

Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit. Vulnerable components includes the SMTP stack and IMAP APPEND command. This issue affects Apache James server version 3.7.2 and prior versions...

CVE-2022-45935

CVE-2022-45935 affects Apache James server (3.7.2 and earlier). The issue is insecure permissions on temporary files used by the server, enabling a local attacker to access private user data in transit. Affected components include the SMTP stack and the IMAP APPEND command. The published CVSSv3.1...

CVE-2022-45935 Apache James server: Temporary File Information Disclosure

Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit. Vulnerable components includes the SMTP stack and IMAP APPEND command. This issue affects Apache James server version 3.7.2 and prior versions...

CVE-2022-46334

Proofpoint Enterprise Protection PPS/PoD contains a vulnerability which allows the pps user to escalate to root privileges due to unnecessary permissions. This affects all versions 8.19.0 and below...

CVE-2022-42949

Silverstripe silverstripe/subsites through 2.6.0 has Insecure Permissions...

Design/Logic Flaw

Silverstripe silverstripe/subsites through 2.6.0 has Insecure Permissions...

CVE-2022-42949

The CVE-2022-42949 issue affects SilverStripe subsites up to version 2.6.0. Root cause: the subsites module can weaken edit restrictions on certain files, allowing a malicious user to edit files they should not have rights to. Impact: unauthorized edits within subsites-enabled projects; no detail...