Weaknesses of type CWE-377

124 results

Arquivo Temporário Inseguro

A aplicação cria arquivos temporários com nomes previsíveis ou em locais acessíveis, permitindo que um atacante local adivinhe, substitua ou acesse dados sensíveis antes de serem deletados. O risco é amplificado em ambientes multi-usuário onde qualquer pessoa pode ler ou sobrescrever esses arquivos.

Example

Um script Java que gera relatório usando `File temp = new File("/tmp/relatorio_" + userId + ".txt")` é vulnerável: outro usuário do sistema pode prever o nome, criar um link simbólico apontando para `/etc/passwd`, e quando a aplicação tentar escrever, compromete um arquivo crítico.

How to mitigate

Use APIs seguras da plataforma: `Files.createTempFile()` em Java, `tempfile.mkstemp()` em Python, ou `mktemp -d` em shell. Garantir permissões restritivas (0600 no Unix) e sempre deletar após uso. Evitar nomes previsíveis e nunca usar `/tmp` sem validação em contextos críticos.

CVE-2024-7358HIGHPoint B Ltd Getscreen Agent MSI Installer getscreen.msi temp fileEPSS 0.3%CVE-2023-2800MEDIUMInsecure Temporary File in huggingface/transformersEPSS 0.3%CVE-2020-1991HIGHTraps: Insecure temporary file vulnerability may allow privilege escalation on WindowsEPSS 0.3%CVE-2024-10372LOWchidiwilliams buzz model_loader.py download_model temp fileEPSS 0.3%CVE-2026-49134HIGHCodexBar < 0.32.0 Privilege Escalation via CLI Installer Temp FileEPSS 0.3%CVE-2017-7560—It was found that rhnsd PID files are created as world-writable that allows local attackers to fill the disks or to kill selected processes.EPSS 0.3%CVE-2020-10744MEDIUMAn incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running become_user from becomeEPSS 0.3%CVE-2020-8030LOWskuba: Insecure /tmp usage when joining node to clusterEPSS 0.3%CVE-2022-24913MEDIUMVersions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProviderEPSS 0.3%CVE-2021-46705MEDIUMgrub2-once uses fixed file name in /var/tmpEPSS 0.2%CVE-2022-4641LOWpig-vector LogisticRegression.java LogisticRegression temp fileEPSS 0.2%CVE-2022-21945MEDIUMcscreen: usage of fixed path /tmp/cscreen.debugEPSS 0.2%CVE-2020-1994MEDIUMPAN-OS: Predictable temporary file vulnerabilityEPSS 0.2%CVE-2022-35631—Filesystem race on temporary filesEPSS 0.2%CVE-2024-22236LOWIn Spring Cloud Contract, versions 4.1.x prior to 4.1.1, versions 4.0.x prior to 4.0.5, and versions 3.1.x prior to 3.1.10, test execution iEPSS 0.2%CVE-2022-41954LOWTemporary File Information Disclosure VulnerabilityEPSS 0.2%CVE-2026-20651MEDIUMA privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.4, mEPSS 0.2%CVE-2026-113713MEDIUMvirtualenv: Temporary app-data can leave dangling seed package linksEPSS 0.2%CVE-2026-55480MEDIUMCUPS copy_model() creates a predictable PPD tempfile without O_EXCL/O_NOFOLLOW (symlink TOCTOU, lp → root)EPSS 0.2%CVE-2024-6654MEDIUMDenial of Service vulnerability in ESET products for macOSEPSS 0.2%