Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:22006
HistoryNov 22, 2019 - 3:04 a.m.

Insecure Temporary Directory Creation

2019-11-2203:04:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

0.0004 Low

EPSS

Percentile

12.7%

rply creates temporary directory in an insecure manner. It uses tempfile.gettempdir() to create /tmp directories per user, allowing any local user to perform symlink or hardlink attacks which can result in system directories being overwritten and causing a denial of service condition.

CPENameOperatorVersion
rplyle0.7.3

0.0004 Low

EPSS

Percentile

12.7%