Ubuntu.comUB:CVE-2022-40299CVE-2022-40299
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
5.1%
In Singular before 4.3.1, a predictable /tmp pathname is used (e.g., by
sdb.cc), which allows local users to gain the privileges of other users via
a procedure in a file under /tmp. NOTE: this CVE Record is about sdb.cc and
similar files in the Singular interface that have predictable /tmp
pathnames; this CVE Record is not about the lack of a safe temporary-file
creation capability in the Singular language.
Related
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
5.1%