CVE-2014-2387

MEDIUM

Pen 0.18.0 - Insecure Temporary File Creation

Title source: llm
STIX 2.1

Description

Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities

References (7)

Core 7
Core References
Third Party Advisory x_refsource_misc
https://security-tracker.debian.org/tracker/CVE-2014-2387
Issue Tracking, Third Party Advisory x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-2387
Issue Tracking, Third Party Advisory x_refsource_misc
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2014-2387
Third Party Advisory, VDB Entry x_refsource_misc
https://exchange.xforce.ibmcloud.com/vulnerabilities/91992
Mailing List, Third Party Advisory x_refsource_misc
http://www.openwall.com/lists/oss-security/2014/03/13/5
Third Party Advisory, VDB Entry x_refsource_misc
http://www.securityfocus.com/bid/66214

Scores

CVSS v3 4.4
EPSS 0.0010
EPSS Percentile 27.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Details

CWE
CWE-668
Status published
Products (5)
debian/debian_linux 8.0
debian/debian_linux 9.0
debian/debian_linux 10.0
opensuse/opensuse 13.1
pen_project/pen 0.18.0
Published Dec 13, 2019
Tracked Since Feb 18, 2026