Lucene search
+L

10 matches found

Github Security Blog
Github Security Blog
added 2026/09/22 8:35 p.m.6 views

MCP Atlassian: Insecure File Permissions on OAuth Token Storage

Summary The OAuth token fallback file storage in OAuthConfig.savetokenstofile creates token files containing access tokens, refresh tokens, and cloud IDs with default filesystem permissions typically 0644 on Linux, world-readable. Any local user on a shared system can read these files to obtain...

5.5CVSS6AI score0.00142EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder