Lucene search
Veracode Vulnerability DatabaseVERACODE:38317HistoryDec 01, 2022 - 3:16 p.m.
Information Disclosure
2022-12-0115:16:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
htsjdk
vulnerability
createtempdir
information disclosure
sensitive files
user privileges
ioutil.java
0.0005 Low
EPSS
Percentile
17.9%
htsjdk is vulnerable to information disclosure. The vulnerability exists in createTempDir function of IOUtil.java because the information in this directory is visible to other local users which allows an attacker to view sensitive files and hijack the directories to manipulate contents escalating the user privileges.
Related
ubuntucve
ubuntucve
CVE-2022-21126
2022-11-29 00:00:00
github
github
HTSJDK is vulnerable to exposure of resource(s) to the wrong sphere
2022-11-29 18:30:18
cve
cve
CVE-2022-21126
2022-11-29 17:15:11
cnvd
cnvd
samtools htsjdk license issue vulnerability
2022-12-01 00:00:00
nvd
nvd
CVE-2022-21126
2022-11-29 17:15:11
osv
osv
CVE-2022-21126
2022-11-29 17:15:11
HTSJDK is vulnerable to exposure of resource(s) to the wrong sphere
2022-11-29 18:30:18
cvelist
cvelist
prion
prion
Directory traversal
2022-11-29 17:15:00