Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:34365
HistoryFeb 24, 2022 - 7:35 a.m.

Time-of-check-time-of-use (TOCTOU)

2022-02-2407:35:09
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

0.0004 Low

EPSS

Percentile

5.1%

b2sdk is vulnerable to time-of-check-time-of-use (TOCTOU). A local attacker is able to read the contents of the local database file where API keys are saved when using SqliteAccountInfo, resulting in sensitive information disclosure via race condition.

CPENameOperatorVersion
b2sdkle1.14.0
b2sdkle1.14.0

0.0004 Low

EPSS

Percentile

5.1%

Related for VERACODE:34365