Fallos del tipo CWE-377

107 resultados

Arquivo temporário inseguro

A aplicação cria arquivos temporários com permissões previsíveis ou sem isolamento adequado, permitindo que outros usuários do sistema leiam, modifiquem ou substituam esses arquivos. Isso expõe dados sensíveis ou permite injeção de conteúdo malicioso que a aplicação depois processa.

Ejemplo

Um programa cria `/tmp/dados_usuario_12345.txt` com permissões 644 (legível globalmente) para armazenar temporariamente credenciais antes de criptografá-las. Outro usuário da máquina lê o arquivo e rouba as credenciais, ou substitui o conteúdo antes da aplicação processá-lo.

Cómo mitigar

Use APIs seguras (`mkstemp`, `tmpfile`, `Files.createTempFile`) que geram nomes aleatórios e garantem permissões restritivas (0600). Armazene temporários em diretórios isolados por usuário ou processo, e delete imediatamente após uso. Nunca construa nomes de arquivo com valores previsíveis em `/tmp`.

CVE-2026-53759LOWlinuxfabrik-lib: Insecure creation of SQLite databasesEPSS 0.3%CVE-2017-7560—It was found that rhnsd PID files are created as world-writable that allows local attackers to fill the disks or to kill selected processes.EPSS 0.3%CVE-2020-8030LOWskuba: Insecure /tmp usage when joining node to clusterEPSS 0.3%CVE-2022-24913MEDIUMVersions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProviderEPSS 0.2%CVE-2021-46705MEDIUMgrub2-once uses fixed file name in /var/tmpEPSS 0.2%CVE-2022-21945MEDIUMcscreen: usage of fixed path /tmp/cscreen.debugEPSS 0.2%CVE-2020-1994MEDIUMPAN-OS: Predictable temporary file vulnerabilityEPSS 0.2%CVE-2026-20649MEDIUMA logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, waEPSS 0.2%CVE-2022-35631—Filesystem race on temporary filesEPSS 0.2%CVE-2026-40635MEDIUMDell PowerScale OneFS versions 9.12.0.0 through 9.13.1.0 contain an Insecure Temporary File vulnerability. A low privileged remote attacker EPSS 0.2%CVE-2022-4641LOWpig-vector LogisticRegression.java LogisticRegression temp fileEPSS 0.2%CVE-2024-22236LOWIn Spring Cloud Contract, versions 4.1.x prior to 4.1.1, versions 4.0.x prior to 4.0.5, and versions 3.1.x prior to 3.1.10, test execution iEPSS 0.2%CVE-2022-41954LOWTemporary File Information Disclosure VulnerabilityEPSS 0.2%CVE-2026-20651MEDIUMA privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.4, mEPSS 0.2%CVE-2026-47852HIGHPredictable cache directory location allows local ONNX model substitution in Spring AIEPSS 0.2%CVE-2024-6654MEDIUMDenial of Service vulnerability in ESET products for macOSEPSS 0.2%CVE-2025-7707HIGHWorld-Writable NLTK Cache Directory Vulnerability in run-llama/llama_indexEPSS 0.2%CVE-2026-41991LOWPredictable Temporary File in GNU gzipEPSS 0.2%CVE-2024-2313LOWIf kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use thEPSS 0.2%CVE-2026-25645MEDIUMRequests has Insecure Temp File Reuse in its extract_zipped_paths() utility functionEPSS 0.2%