10 matches found
MCP Atlassian: Insecure File Permissions on OAuth Token Storage
Summary The OAuth token fallback file storage in OAuthConfig.savetokenstofile creates token files containing access tokens, refresh tokens, and cloud IDs with default filesystem permissions typically 0644 on Linux, world-readable. Any local user on a shared system can read these files to obtain...
5.5CVSS6AI score0.00142EPSS
SaveExploits0References5Affected Software1
20