Fallos del tipo CWE-378

47 resultados

Criação de arquivo temporário com permissões inseguras

A aplicação cria arquivos temporários com permissões de leitura/escrita muito abertas (ex: 0666), permitindo que qualquer usuário local acesse, modifique ou substitua seu conteúdo. Se o arquivo contém dados sensíveis ou é usado para carregar código/configuração, um atacante local pode ler segredos, injetar malware ou alterar comportamento da aplicação.

Ejemplo

Um serviço de backup cria `/tmp/backup_XXXXX.sql` com permissões 0666, mantendo credenciais do banco de dados em texto plano. Um usuário local lê o arquivo, rouba as credenciais ou o substitui por um SQL malicioso que será executado na próxima restauração.

Cómo mitigar

Use APIs seguras para criar temporários (ex: `mkstemp()` em C, `NamedTemporaryFile()` em Python, `Files.createTempFile()` em Java) que automaticamente restringem permissões a 0600. Nunca crie com `File.createNewFile()` ou `fopen()` simples. Valide o proprietário do arquivo antes de ler e armazene dados sensíveis fora de `/tmp`.

CVE-2021-1428HIGHCisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking VulnerabilitiesEPSS 0.2%CVE-2021-1426HIGHCisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking VulnerabilitiesEPSS 0.2%CVE-2022-24411HIGHDell PowerScale OneFS 8.2.2 and above contain an elevation of privilege vulnerability. A local attacker with ISI_PRIV_LOGIN_SSH and/or ISI_PEPSS 0.2%CVE-2025-27148HIGHGradle vulnerable to local privilege escalation through system temporary directoryEPSS 0.2%CVE-2021-1430HIGHCisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking VulnerabilitiesEPSS 0.2%CVE-2024-7358HIGHPoint B Ltd Getscreen Agent Installation getscreen.msi temp fileEPSS 0.2%CVE-2023-28600MEDIUMZoom for MacOSclients prior to 5.14.0 contain an improper access control vulnerability. A malicious user may be able to delete/replace ZoomEPSS 0.2%CVE-2025-55629MEDIUMInsecure permissions in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 allow attackers to arbitEPSS 0.2%CVE-2024-42052HIGHThe MSI installer for Splashtop Streamer for Windows before 3.5.8.0 uses a temporary folder with weak permissions during installation. A locEPSS 0.2%CVE-2023-0481LOWIn RestEasy Reactive implementation of Quarkus the insecure File.createTempFile() is used in the FileBodyHandler class which creates temp fiEPSS 0.2%CVE-2026-4137HIGHIncomplete Fix for CVE-2025-10279: Insecure Temporary Directory Permissions in mlflow/mlflowEPSS 0.2%CVE-2025-34352HIGHJumpCloud Remote Assist < 0.317.0 Arbitrary File Write/Delete via Insecure Temp DirectoryEPSS 0.2%CVE-2025-32438HIGHLocal privilege escalation in make-initrd-ngEPSS 0.2%CVE-2024-47884LOWInsecure Temporary File in `foxmarks`EPSS 0.2%CVE-2023-26603MEDIUMJumpCloud Agent before 1.178.0 Creates a Temporary File in a Directory with Insecure Permissions. This allows privilege escalation to SYSTEMEPSS 0.2%CVE-2024-52543MEDIUMDell NativeEdge, version(s) 2.1.0.0, contain(s) a Creation of Temporary File With Insecure Permissions vulnerability. A high privileged attaEPSS 0.2%CVE-2023-27408LOWA vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The `i2c` mutex file is created with the permissions bits of EPSS 0.2%CVE-2026-4822HIGHEnter Software Iperius Backup Backup Service temp fileEPSS 0.2%CVE-2025-7647HIGHInsecure Temporary File Handling in run-llama/llama_indexEPSS 0.1%CVE-2025-38747HIGHDell SupportAssist OS Recovery, versions prior to 5.5.14.0, contain a Creation of Temporary File With Insecure Permissions vulnerability. A EPSS 0.1%