Fallos del tipo CWE-377

124 resultados

Arquivo temporário inseguro

A aplicação cria arquivos temporários com permissões previsíveis ou sem isolamento adequado, permitindo que outros usuários do sistema leiam, modifiquem ou substituam esses arquivos. Isso expõe dados sensíveis ou permite injeção de conteúdo malicioso que a aplicação depois processa.

Ejemplo

Um programa cria `/tmp/dados_usuario_12345.txt` com permissões 644 (legível globalmente) para armazenar temporariamente credenciais antes de criptografá-las. Outro usuário da máquina lê o arquivo e rouba as credenciais, ou substitui o conteúdo antes da aplicação processá-lo.

Cómo mitigar

Use APIs seguras (`mkstemp`, `tmpfile`, `Files.createTempFile`) que geram nomes aleatórios e garantem permissões restritivas (0600). Armazene temporários em diretórios isolados por usuário ou processo, e delete imediatamente após uso. Nunca construa nomes de arquivo com valores previsíveis em `/tmp`.

CVE-2024-7358HIGHPoint B Ltd Getscreen Agent MSI Installer getscreen.msi temp fileEPSS 0.3%CVE-2023-2800MEDIUMInsecure Temporary File in huggingface/transformersEPSS 0.3%CVE-2020-1991HIGHTraps: Insecure temporary file vulnerability may allow privilege escalation on WindowsEPSS 0.3%CVE-2024-10372LOWchidiwilliams buzz model_loader.py download_model temp fileEPSS 0.3%CVE-2026-49134HIGHCodexBar < 0.32.0 Privilege Escalation via CLI Installer Temp FileEPSS 0.3%CVE-2017-7560—It was found that rhnsd PID files are created as world-writable that allows local attackers to fill the disks or to kill selected processes.EPSS 0.3%CVE-2020-10744MEDIUMAn incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running become_user from becomeEPSS 0.3%CVE-2020-8030LOWskuba: Insecure /tmp usage when joining node to clusterEPSS 0.3%CVE-2022-24913MEDIUMVersions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProviderEPSS 0.3%CVE-2021-46705MEDIUMgrub2-once uses fixed file name in /var/tmpEPSS 0.2%CVE-2022-4641LOWpig-vector LogisticRegression.java LogisticRegression temp fileEPSS 0.2%CVE-2022-21945MEDIUMcscreen: usage of fixed path /tmp/cscreen.debugEPSS 0.2%CVE-2020-1994MEDIUMPAN-OS: Predictable temporary file vulnerabilityEPSS 0.2%CVE-2022-35631—Filesystem race on temporary filesEPSS 0.2%CVE-2024-22236LOWIn Spring Cloud Contract, versions 4.1.x prior to 4.1.1, versions 4.0.x prior to 4.0.5, and versions 3.1.x prior to 3.1.10, test execution iEPSS 0.2%CVE-2022-41954LOWTemporary File Information Disclosure VulnerabilityEPSS 0.2%CVE-2026-20651MEDIUMA privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.4, mEPSS 0.2%CVE-2026-113713MEDIUMvirtualenv: Temporary app-data can leave dangling seed package linksEPSS 0.2%CVE-2026-55480MEDIUMCUPS copy_model() creates a predictable PPD tempfile without O_EXCL/O_NOFOLLOW (symlink TOCTOU, lp → root)EPSS 0.2%CVE-2024-6654MEDIUMDenial of Service vulnerability in ESET products for macOSEPSS 0.2%