4277 matches found
CVE-2021-41988
Qlik NPrinting Designer through 21.14.3.0 creates a Temporary File in a Directory with Insecure Permissions...
CVE-2021-41988
Qlik NPrinting Designer through 21.14.3.0 creates a Temporary File in a Directory with Insecure Permissions...
PT-2023-12393 · Qlik · Qlikview
Name of the Vulnerable Software and Affected Versions: Qlik QlikView versions prior to 12.60.20100.0 Description: The issue allows the creation of a temporary file in a directory with insecure permissions. Recommendations: For versions prior to 12.60.20100.0, update to version 12.60.20100.0 or...
CVE-2021-41989
Qlik QlikView through 12.60.20100.0 creates a Temporary File in a Directory with Insecure Permissions...
Quarkus 安全漏洞
Quarkus is a cloud-native Linux container-first framework for writing Java applications. A security vulnerability exists in Quarkus that stems from insecure permissions on its temp file...
CVE-2021-41988
CVE-2021-41988 affects Qlik NPrinting Designer up to version 21.14.3.0. The issue arises from the application creating a temporary file in a directory with insecure permissions, which could allow unauthorized access or modification of sensitive data. Public references in connected documents confi...
Insecure Permissions
org.keycloak:keycloak-parent is vulnerable to Insecure Permissions. An attacker is able to shadow other users with the same email and impersonate or lockout the victim due to the email trust not being handled correctly...
CVE-2023-22947
Insecure folder permissions in the Windows installation path of Shibboleth Service Provider SP before 3.4.1 allow an unprivileged local attacker to escalate privileges to SYSTEM via DLL planting in the service executable's folder. This occurs because the installation goes under C:\opt rather than...
Information Disclosure
org.apache.james:james-server-core is vulnerable to Information Disclosure. A local attacker is able to access private user data in transit due to the use of temporary files with insecure permissions which includes in the SMTP stack and IMAP APPEND command's vulnerable components, resulting in...
CVE-2022-45935
Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit. Vulnerable components includes the SMTP stack and IMAP APPEND command. This issue affects Apache James server version 3.7.2 and prior versions...
GHSA-V6VP-62VC-84QW Apache James server allows an attacker with local access to access private user data in transit
Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit. Vulnerable components includes the SMTP stack and IMAP APPEND command. This issue affects Apache James server version 3.7.2 and prior versions...
Apache James server allows an attacker with local access to access private user data in transit
Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit. Vulnerable components includes the SMTP stack and IMAP APPEND command. This issue affects Apache James server version 3.7.2 and prior versions...
CVE-2022-45935
Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit. Vulnerable components includes the SMTP stack and IMAP APPEND command. This issue affects Apache James server version 3.7.2 and prior versions...
CVE-2022-45935
CVE-2022-45935 affects Apache James server (3.7.2 and earlier). The issue is insecure permissions on temporary files used by the server, enabling a local attacker to access private user data in transit. Affected components include the SMTP stack and the IMAP APPEND command. The published CVSSv3.1...
CVE-2022-45935 Apache James server: Temporary File Information Disclosure
Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit. Vulnerable components includes the SMTP stack and IMAP APPEND command. This issue affects Apache James server version 3.7.2 and prior versions...
CVE-2022-46334
Proofpoint Enterprise Protection PPS/PoD contains a vulnerability which allows the pps user to escalate to root privileges due to unnecessary permissions. This affects all versions 8.19.0 and below...
CVE-2022-42949
Silverstripe silverstripe/subsites through 2.6.0 has Insecure Permissions...
Design/Logic Flaw
Silverstripe silverstripe/subsites through 2.6.0 has Insecure Permissions...
CVE-2022-42949
The CVE-2022-42949 issue affects SilverStripe subsites up to version 2.6.0. Root cause: the subsites module can weaken edit restrictions on certain files, allowing a malicious user to edit files they should not have rights to. Impact: unauthorized edits within subsites-enabled projects; no detail...