Weaknesses of type CWE-377

124 results

Arquivo Temporário Inseguro

A aplicação cria arquivos temporários com nomes previsíveis ou em locais acessíveis, permitindo que um atacante local adivinhe, substitua ou acesse dados sensíveis antes de serem deletados. O risco é amplificado em ambientes multi-usuário onde qualquer pessoa pode ler ou sobrescrever esses arquivos.

Example

Um script Java que gera relatório usando `File temp = new File("/tmp/relatorio_" + userId + ".txt")` é vulnerável: outro usuário do sistema pode prever o nome, criar um link simbólico apontando para `/etc/passwd`, e quando a aplicação tentar escrever, compromete um arquivo crítico.

How to mitigate

Use APIs seguras da plataforma: `Files.createTempFile()` em Java, `tempfile.mkstemp()` em Python, ou `mktemp -d` em shell. Garantir permissões restritivas (0600 no Unix) e sempre deletar após uso. Evitar nomes previsíveis e nunca usar `/tmp` sem validação em contextos críticos.

CVE-2015-0849LOWpycode-browser before version 1.0 is prone to a predictable temporary file vulnerability.EPSS 0.1%CVE-2026-35342LOWuutils coreutils mktemp Insecure Temporary File Placement via Empty TMPDIREPSS 0.1%CVE-2026-93864HIGHFireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as RootEPSS 0.1%CVE-2025-46369HIGHDell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contains an Insecure Temporary File vulnerability. A low privileged aEPSS 0.1%CVE-2021-22572MEDIUMData-transfer-project information disclosure via tmp directoryEPSS 0.1%CVE-2026-49135HIGHCodexBar < 0.32.0 Insecure Temporary File Handling in Notarization WorkflowEPSS 0.1%CVE-2026-16791LOWPredictable Temporary File Symlink Vulnerability in Lenovo XClarity Essentials OneCLIEPSS 0.1%CVE-2026-73584MEDIUMSblim-sfcb: sblim-sfcb: privileged file corruption and denial of service via insecure temporary file handlingEPSS 0.1%CVE-2026-45384MEDIUMbit7z: Arbitrary File Overwrite via Symlink Attack on Predictable Temp File During Archive UpdateEPSS 0.1%CVE-2026-82715HIGHInsecure Temporary File Vulnerability in Hitachi Disk Array Driver for AIX, Hitachi Disk Array Driver for Virtual I/O ServerEPSS 0.1%CVE-2025-46368MEDIUMDell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contains an Insecure Temporary File vulnerability. A low privileged aEPSS 0.1%CVE-2026-41991LOWPredictable Temporary File in GNU gzipEPSS 0.1%CVE-2026-97209MEDIUMInsecure temporary file in mix deps.partition lets a local user execute code in another user's dependency buildEPSS 0.1%CVE-2026-122137MEDIUMPowerlevel10k before 1.20.19 Insecure Temporary Directory via gitstatus InstallerEPSS 0.1%CVE-2026-25701HIGHAn Insecure Temporary File vulnerability in openSUSE sdbootutil allows local users to pre-create a directory to achieve various effects likeEPSS 0.1%CVE-2025-14614MEDIUMQuartus® Prime Standard and Quartus® Prime Lite Security AdvisoryEPSS 0.1%CVE-2025-14612MEDIUMQuartus Prime Pro Edition AdvisoryEPSS 0.1%CVE-2026-121549MEDIUMnnn through 5.3 Insecure Temporary File Symlink Overwrite via pdfread and nuke PluginsEPSS 0.1%CVE-2026-106451HIGHyawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local userEPSS 0.1%CVE-2026-40979MEDIUMIn Spring AI, having access to a shared environment can expose the ONNX model used by the application. Affected versions: Spring AI: 1.0.0 EPSS 0.1%