CVE-2021-22572
MEDIUMFile.createTempFile - Info Disclosure
Title source: llmDescription
On unix-like systems, the system temporary directory is shared between all users on that system. The root cause is File.createTempFile creates files in the the system temporary directory with world readable permissions. Any sensitive information written to theses files is visible to all other local users on unix-like systems. We recommend upgrading past commit https://github.com/google/data-transfer-project/pull/969
Scores
CVSS v3
5.5
EPSS
0.0001
EPSS Percentile
1.9%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Classification
CWE
CWE-377
CWE-668
Status
published
Affected Products (1)
google/data_transfer_project
< 0.3.57
Timeline
Published
Mar 29, 2022
Tracked Since
Feb 18, 2026