GHSA-53WM-97P6-582F instack-undercloud vulnerable to symlink attack on tmp files

A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack Platform Oacta, 5.3.0 as packaged in Red Hat OpenStack Newton, where pre-install and security policy scripts used insecure temporary files. A local user could exploi...

Information Disclosure

netty-common is vulnerable to Information Disclosure. The vulnerability exists due to the insufficient fix for the CVE-2021-21290. When the temporary storing uploads on the disk is enabled and running on java 6, an attacker can gain sensitive information through the local system temporary directo...

CVE-2022-29263

On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, as well as F5 BIG-IP APM Clients 7.x versions prior to 7.2.1.5, the BIG-IP Edge Client Component...

CVE-2022-29263: Incorrect Permission Assignment for Critical Resource

On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, as well as F5 BIG-IP APM Clients 7.x versions prior to 7.2.1.5, the BIG-IP Edge Client Component...

PT-2022-19508

Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM versions prior to 16.1.2.2 F5 BIG-IP APM versions prior to 15.1.5.1 F5 BIG-IP APM versions prior to 14.1.4.6 F5 BIG-IP APM versions prior to 13.1.5 F5 BIG-IP APM versions 12.1.x F5 BIG-IP APM versions 11.6.x F5 BIG-IP APM Clients...

CVE-2022-29263

On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, as well as F5 BIG-IP APM Clients 7.x versions prior to 7.2.1.5, the BIG-IP Edge Client Component...

F5 Networks BIG-IP : BIG-IP Edge Client for Windows vulnerability (K33552735)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.5 / 14.1.4.6 / 15.1.5.1 / 16.1.2.2 / 17.0.0. It is, therefore, affected by a vulnerability as referenced in the K33552735 advisory. - On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to...

Puppet arbitrary files overwrite via a symlink attack

Puppet 0.24.x before 0.24.9 and 0.25.x before 0.25.2 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/daemonout, 2 /tmp/puppetdoc.txt, 3 /tmp/puppetdoc.tex, or 4 /tmp/puppetdoc.aux temporary file...

CVE-2022-22187

An Improper Privilege Management vulnerability in the Windows Installer framework used in the Juniper Networks Juniper Identity Management Service JIMS allows an unprivileged user to trigger a repair operation. Running a repair operation, in turn, will trigger a number of file operations in the...

CVE-2022-22187 JIMS: Local Privilege Escalation vulnerability via repair functionality

An Improper Privilege Management vulnerability in the Windows Installer framework used in the Juniper Networks Juniper Identity Management Service JIMS allows an unprivileged user to trigger a repair operation. Running a repair operation, in turn, will trigger a number of file operations in the...

CVE-2022-1256

A local privilege escalation vulnerability in MA for Windows prior to 5.7.6 allows a local low privileged user to gain system privileges through running the repair functionality. Temporary file actions were performed on the local user's %TEMP% directory with System privileges through manipulation...

CVE-2022-1256

A local privilege escalation vulnerability in MA for Windows prior to 5.7.6 allows a local low privileged user to gain system privileges through running the repair functionality. Temporary file actions were performed on the local user's %TEMP% directory with System privileges through manipulation...

The vulnerability of Adobe Premiere Elements software-related video editing programs lies in the creation of temporary files with insecure resolutions, which allows attackers to escalate their privileges.

The vulnerability of Adobe Premiere Elements software-related video editing programs lies in the creation of temporary files with insecure resolutions. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2021-42255

AppGuard Enterprise before 6.7.100.1 creates a Temporary File in a Directory with Insecure Permissions. Local users can gain SYSTEM privileges because a repair operation relies on the %TEMP% directory of an unprivileged user...

CVE-2021-42255

AppGuard Enterprise before 6.7.100.1 creates a Temporary File in a Directory with Insecure Permissions. Local users can gain SYSTEM privileges because a repair operation relies on the %TEMP% directory of an unprivileged user...

PT-2022-2523 · Mcafee · Mcafee Agent

Name of the Vulnerable Software and Affected Versions: McAfee Agent versions prior to 5.7.6 Description: The issue is related to a local privilege escalation vulnerability that allows a low-privileged user to gain system privileges. This is achieved by exploiting the repair functionality, which...

BeyondTrust AppGuard Enterprise 安全漏洞

BeyondTrust AppGuard Enterprise is BeyondTrust's easy-to-use, industry-leading security and lower cost all-in-one remote access and remote support solution. A security vulnerability exists in BeyondTrust AppGuard Enterprise through 6.6.20.2, which originates when the affected product creates a...

The vulnerability of the Adobe Digital Editions e-book reading program lies in the creation of temporary files with insecure permissions, which allows a hacker to escalate their privileges.

The vulnerability of the Adobe Digital Editions e-book reading software relates to the creation of temporary files with insecure permissions. Exploiting this vulnerability can allow an attacker to enhance their privileges...

GHSA-R3R5-JHW6-4634 Insecure temporary file usage in SWHKD

SWHKD 1.1.5 unsafely uses the /tmp/swhkd.sock pathname. There can be an information leak or denial of service...

Information Disclosure

NiFi Single User Utilities is vulnerable to information disclosure. The vulnerability exists in writeLoginCredentials function due to temporary file creation of NiFi containing credential information in a global directory which allows an attacker to gain read access and perform unauthorized actio...