Weaknesses of type CWE-377

108 results

Arquivo Temporário Inseguro

A aplicação cria arquivos temporários com nomes previsíveis ou em locais acessíveis, permitindo que um atacante local adivinhe, substitua ou acesse dados sensíveis antes de serem deletados. O risco é amplificado em ambientes multi-usuário onde qualquer pessoa pode ler ou sobrescrever esses arquivos.

Example

Um script Java que gera relatório usando `File temp = new File("/tmp/relatorio_" + userId + ".txt")` é vulnerável: outro usuário do sistema pode prever o nome, criar um link simbólico apontando para `/etc/passwd`, e quando a aplicação tentar escrever, compromete um arquivo crítico.

How to mitigate

Use APIs seguras da plataforma: `Files.createTempFile()` em Java, `tempfile.mkstemp()` em Python, ou `mktemp -d` em shell. Garantir permissões restritivas (0600 no Unix) e sempre deletar após uso. Evitar nomes previsíveis e nunca usar `/tmp` sem validação em contextos críticos.

CVE-2022-3952LOWManyDesigns Portofino WarFileLauncher.java createTempDir temp fileEPSS 0.6%CVE-2020-2016HIGHPAN-OS: Temporary file race condition vulnerability in PAN-OS leads to local privilege escalationEPSS 0.6%CVE-2022-3969LOWOpenKM FileUtils.java getFileExtension temp fileEPSS 0.5%CVE-2022-4817LOWcentic9 jgit-cookbook temp fileEPSS 0.5%CVE-2022-41946MEDIUMTemporaryFolder on unix-like systems does not limit access to created files in pgjdbcEPSS 0.5%CVE-2021-29429MEDIUMInformation disclosure through temporary directory permissionsEPSS 0.5%CVE-2018-1053—In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2, pg_upgrade creates filEPSS 0.5%CVE-2018-19637LOWStatic temporary filename allows overwriting of filesEPSS 0.5%CVE-2020-35451—Oozie local privilege escalationEPSS 0.4%CVE-2016-9595HIGHA flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files. A local user could exploitEPSS 0.4%CVE-2020-1733MEDIUMA race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unpriviEPSS 0.4%CVE-2018-19638LOWUser can overwrite arbitrary log files in support tarEPSS 0.4%CVE-2017-15111—keycloak-httpd-client-install versions before 0.8 insecurely creates temporary file allowing local attackers to overwrite other files via syEPSS 0.4%CVE-2018-6705LOWMcAfee Agent (MA) for Linux Privilege Escalation vulnerabilityEPSS 0.4%CVE-2020-1740LOWA flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another EPSS 0.4%CVE-2018-6704MEDIUMMcAfee Agent for Linux Privilege Escalation vulnerabilityEPSS 0.4%CVE-2020-1981HIGHPAN-OS: Predictable temporary filename vulnerability allows local privilege escalationEPSS 0.4%CVE-2025-66625MEDIUMUmbraco Vulnerable to Improper File Access and Credential Exposure through Dictionary Import FunctionalityEPSS 0.4%CVE-2020-8032MEDIUMLocal privilege escalation to root due to insecure tmp file usageEPSS 0.4%CVE-2017-7549—A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack PlatformEPSS 0.4%