CWE-377

Insecure Temporary File

Parent: CWE-668 - Exposure of Resource to Wrong Sphere

Creating and using insecure temporary files can leave application and system data vulnerable to attack.

97 vulnerabilities with CWE-377
CVE-2022-3969 LOW
OpenKM <6.3.11 - Insecure Temp File
CVSS 2.6
CVE-2022-3952 LOW
ManyDesigns Portofino < 5.3.3 - Insecure Temporary File Permissions in WarFileLauncher.java
CVSS 2.6
CVE-2022-35631 MEDIUM
Velociraptor <0.6.5.2 - Symlink Attack
CVSS 5.5
CVE-2022-21809 HIGH
InHand Networks InRouter302 V3.5.4 - File Write
CVSS 8.1
CVE-2022-0315 HIGH
horovod < 0.24.0 - Insecure Temporary File
CVSS 7.5
CVE-2022-21945 MEDIUM
opensuse factory cscreen <1.2-1.3 - DoS
CVSS 5.1
CVE-2022-0736 HIGH
mlflow/mlflow <1.23.1 - Info Disclosure
CVSS 7.5
CVE-2021-22572 MEDIUM
File.createTempFile - Info Disclosure
CVSS 5.5
CVE-2021-46705 MEDIUM
grub2 <2.06-150400.7.1, <2.06-18.1 - Local File Truncation
CVSS 5.1
CVE-2021-20202 HIGH
Keycloak < 13.0.0 - Insecure Temporary File Permissions
CVSS 7.3
CVE-2021-25316 LOW
SUSE Linux Enterprise Server <12-SP5, 15-SP2 - Local Privilege Esca...
CVSS 3.3
CVE-2021-29429 MEDIUM
Gradle < 7.0 - Local Information Disclosure via TextResourceFactory Temporary Files
CVSS 4.0
CVE-2020-35451 MEDIUM
Apache Oozie < 5.2.1 - Race Condition in OozieSharelibCLI
CVSS 4.7
CVE-2020-8032 MEDIUM
openSUSE Factory cyrus-sasl <2.1.27-4.2 - Local Privilege Escalation
CVSS 6.7
CVE-2020-8030 LOW
SUSE CaaS Platform 4.5 - Info Disclosure
CVSS 3.6
CVE-2020-8027 HIGH
openldap2 <2.4.46-9.37.1 - Info Disclosure
CVSS 7.3
CVE-2020-25636 MEDIUM
Ansible - Unauthenticated Arbitrary File Write via AWS SSM Connection Plugin
CVSS 6.6
CVE-2020-10744 MEDIUM
Ansible Engine <2.7.18-2.9.9 - Privilege Escalation
CVSS 5.0
CVE-2020-2016 HIGH
PAN-OS < 7.1.26, < 8.1.13, < 9.0.6 - Privilege Escalation via Insecure Temporary File Creation
CVSS 7.0
CVE-2020-1994 MEDIUM
PAN-OS <8.1.13, <9.0.7 - Local Privilege Escalation
CVSS 4.1
CVE-2020-1991 HIGH
Palo Alto Networks Traps <5.0.8-6.1.4 - Privilege Escalation
CVSS 7.8
CVE-2020-1740 LOW
Ansible < 2.7.17 - Insecure Temporary File Handling in Vault Edit
CVSS 3.9
CVE-2020-1981 HIGH
PAN-OS 8.1.0-8.1.12 - Local Privilege Escalation via Predictable Temporary Filename
CVSS 7.0
CVE-2020-1733 MEDIUM
Ansible Engine <2.7.17, <2.8.9, <2.9.6 - Privilege Escalation
CVSS 5.0
CVE-2018-25068 MEDIUM
devent globalpom-utils <4.5.0 - Insecure Temp File
CVSS 6.3
Details
Vulnerabilities 97
Links
MITRE CWE Entry Search this CWE With Exploits