PT-2021-24117

Name of the Vulnerable Software and Affected Versions: tmate-ssh-server version 2.3.0 Description: The issue is related to the insecure creation of temporary directories, which allows a local attacker to compromise the integrity of session handling. Recommendations: For tmate-ssh-server version...

CVE-2021-44513: Concurrent Execution using Shared Resource with Improper Synchronization

Insecure creation of temporary directories in tmate-ssh-server 2.3.0 allows a local attacker to compromise the integrity of session handling...

CVE-2021-44512: Incorrect Permission Assignment for Critical Resource

World-writable permissions on the /tmp/tmate/sessions directory in tmate-ssh-server 2.3.0 allow a local attacker to compromise the integrity of session handling, or obtain the read-write session ID from a read-only session symlink in this directory...

PT-2021-24116

Name of the Vulnerable Software and Affected Versions: tmate-ssh-server version 2.3.0 Description: The issue is related to world-writable permissions on the /tmp/tmate/sessions directory, allowing a local attacker to compromise session handling integrity or obtain a read-write session ID from a...