590 matches found
CVE-2020-8030
A Insecure Temporary File vulnerability in skuba of SUSE CaaS Platform 4.5 allows local attackers to leak the bootstrapToken or modify the configuration file before it is processed, leading to arbitrary modifications of the machine/cluster...
CVE-2020-8027: Insecure Temporary File
A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Leap 15.2 allows local attackers to overwrite arbitrary files and gain access to the openldap2 configuration This issue affects: SUSE...
CVE-2020-8030: Insecure Temporary File
A Insecure Temporary File vulnerability in skuba of SUSE CaaS Platform 4.5 allows local attackers to leak the bootstrapToken or modify the configuration file before it is processed, leading to arbitrary modifications of the machine/cluster...
PT-2021-12706
Name of the Vulnerable Software and Affected Versions: SUSE CaaS Platform 4.5 Description: A local attacker can exploit an Insecure Temporary File vulnerability in skuba to leak the bootstrapToken or modify the configuration file before it is processed. This can lead to arbitrary modifications of...
CVE-2021-23331 Insecure Temporary File
This affects all versions of package com.squareup:connect. The method prepareDownloadFilecreates creates a temporary file with the permissions bits of -rw-r--r-- on unix-like systems. On unix-like systems, the system temporary directory is shared between users. As such, the contents of the file...
Insecure Temporary File
Overview com.squareup:connect is a stack of middleware that is executed in order in each request. Affected versions of this package are vulnerable to Insecure Temporary File. The method prepareDownloadFilecreates creates a temporary file with the permissions bits of -rw-r--r-- on unix-like system...
CVE-2020-8030
A Insecure Temporary File vulnerability in skuba of SUSE CaaS Platform 4.5 allows local attackers to leak the bootstrapToken or modify the configuration file before it is processed, leading to arbitrary modifications of the machine/cluster...
GLSA-202011-18 : Apache Ant: Insecure temporary file
The remote host is affected by the vulnerability described in GLSA-202011-18 Apache Ant: Insecure temporary file A previous fix for a security vulnerability involving insecure temporary files has been found to be incomplete. Impact : A local attacker could perform symlink attacks to overwrite...
openSUSE: Security Advisory for ant (openSUSE-SU-2020:1022-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2020-9291: Exposure of Resource to Wrong Sphere
An Insecure Temporary File vulnerability in FortiClient for Windows 6.2.1 and below may allow a local user to gain elevated privileges via exhausting the pool of temporary file names combined with a symbolic link attack...
Ansible -- Insecure Temporary File
NVD reports: An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running becomeuser from become directive. The provided fix is insufficient to prevent the race condition on systems using ACLs and FUSE filesystems...
CVE-2020-1991: Insecure Temporary File
An insecure temporary file vulnerability in Palo Alto Networks Traps allows a local authenticated Windows user to escalate privileges or overwrite system files. This issue affects Palo Alto Networks Traps 5.0 versions before 5.0.8; 6.1 versions before 6.1.4 on Windows. This issue does not affect...
CVE-2020-1740: Insecure Temporary File
A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another user on the same computer can read the old and new secret, as it is created in a temporary file with mkstemp and the returned file descriptor is closed and t...
CVE-2014-2387
Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities...
PT-2019-7086
Name of the Vulnerable Software and Affected Versions Pen version 0.18.0 Description The issue is related to Insecure Temporary File Creation. Recommendations For Pen version 0.18.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability...
CVE-2014-2387: Exposure of Resource to Wrong Sphere
Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities...
CVE-2013-4280
CVE-2013-4280 affects RedHat vsdm 4.9.6 with an insecure temporary file vulnerability. The vulnerability’s impact is limited to integrity (I:H) with no confidentiality or availability impact per CVSS. It is a local-attack, low-complexity issue without required user interaction. Connected Nessus d...
PT-2019-6941
Name of the Vulnerable Software and Affected Versions RedHat vsdm version 4.9.6 Description The issue is related to an insecure temporary file vulnerability. Recommendations For RedHat vsdm version 4.9.6, at the moment, there is no information about a newer version that contains a fix for this...
