Fallos del tipo CWE-377

124 resultados

Arquivo temporário inseguro

A aplicação cria arquivos temporários com permissões previsíveis ou sem isolamento adequado, permitindo que outros usuários do sistema leiam, modifiquem ou substituam esses arquivos. Isso expõe dados sensíveis ou permite injeção de conteúdo malicioso que a aplicação depois processa.

Ejemplo

Um programa cria `/tmp/dados_usuario_12345.txt` com permissões 644 (legível globalmente) para armazenar temporariamente credenciais antes de criptografá-las. Outro usuário da máquina lê o arquivo e rouba as credenciais, ou substitui o conteúdo antes da aplicação processá-lo.

Cómo mitigar

Use APIs seguras (`mkstemp`, `tmpfile`, `Files.createTempFile`) que geram nomes aleatórios e garantem permissões restritivas (0600). Armazene temporários em diretórios isolados por usuário ou processo, e delete imediatamente após uso. Nunca construa nomes de arquivo com valores previsíveis em `/tmp`.

CVE-2022-3952LOWManyDesigns Portofino WarFileLauncher.java createTempDir temp fileEPSS 0.6%CVE-2020-2016HIGHPAN-OS: Temporary file race condition vulnerability in PAN-OS leads to local privilege escalationEPSS 0.6%CVE-2022-41946MEDIUMTemporaryFolder on unix-like systems does not limit access to created files in pgjdbcEPSS 0.6%CVE-2022-4817LOWcentic9 jgit-cookbook temp fileEPSS 0.6%CVE-2022-3969LOWOpenKM FileUtils.java getFileExtension temp fileEPSS 0.6%CVE-2021-29429MEDIUMInformation disclosure through temporary directory permissionsEPSS 0.5%CVE-2018-1053—In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2, pg_upgrade creates filEPSS 0.5%CVE-2026-54584MEDIUMmport trusts environment-controlled temporary directories in privileged metadata extractionEPSS 0.5%CVE-2025-14602MEDIUMWeak File Name Generation in vsDeskEPSS 0.5%CVE-2026-20649MEDIUMA logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.8.2, macOS TahEPSS 0.5%CVE-2018-19637LOWStatic temporary filename allows overwriting of filesEPSS 0.5%CVE-2020-35451—Oozie local privilege escalationEPSS 0.4%CVE-2016-9595HIGHA flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files. A local user could exploitEPSS 0.4%CVE-2020-1733MEDIUMA race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unpriviEPSS 0.4%CVE-2018-19638LOWUser can overwrite arbitrary log files in support tarEPSS 0.4%CVE-2017-15111—keycloak-httpd-client-install versions before 0.8 insecurely creates temporary file allowing local attackers to overwrite other files via syEPSS 0.4%CVE-2026-40635MEDIUMDell PowerScale OneFS versions 9.12.0.0 through 9.13.1.0 contain an Insecure Temporary File vulnerability. A low privileged remote attacker EPSS 0.4%CVE-2018-6705LOWMcAfee Agent (MA) for Linux Privilege Escalation vulnerabilityEPSS 0.4%CVE-2018-6704MEDIUMMcAfee Agent for Linux Privilege Escalation vulnerabilityEPSS 0.4%CVE-2020-1981HIGHPAN-OS: Predictable temporary filename vulnerability allows local privilege escalationEPSS 0.4%