Falhas do tipo CWE-377

108 resultados

Arquivo temporário inseguro

A aplicação cria arquivos temporários de forma previsível ou sem proteção adequada de permissões, permitindo que um atacante leia, modifique ou substitua o arquivo antes que a aplicação o use. Isso pode expor dados sensíveis ou levar a execução de código malicioso.

Exemplo

Um programa de backup cria um arquivo temporário com nome fixo como `/tmp/backup_dados.tmp` ou `/tmp/app123.tmp` sem definir permissões restritivas. Um atacante em sistema compartilhado cria um link simbólico apontando para um arquivo crítico, fazendo a aplicação sobrescrever permissões ou dados importantes.

Como mitigar

Use APIs seguras para criar arquivos temporários (como `mkstemp()` em C, `tempfile` em Python ou `Files.createTempFile()` em Java) que geram nomes aleatórios e definem permissões restritas automaticamente. Evite caminhos fixos e prefixos previsíveis, e sempre valide se o arquivo foi criado apenas pela aplicação.

CVE-2020-10744MEDIUMAn incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running become_user from becomeEPSS 0.3%CVE-2026-53759LOWlinuxfabrik-lib: Insecure creation of SQLite databasesEPSS 0.3%CVE-2017-7560—It was found that rhnsd PID files are created as world-writable that allows local attackers to fill the disks or to kill selected processes.EPSS 0.3%CVE-2020-8030LOWskuba: Insecure /tmp usage when joining node to clusterEPSS 0.3%CVE-2022-24913MEDIUMVersions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProviderEPSS 0.2%CVE-2021-46705MEDIUMgrub2-once uses fixed file name in /var/tmpEPSS 0.2%CVE-2022-21945MEDIUMcscreen: usage of fixed path /tmp/cscreen.debugEPSS 0.2%CVE-2020-1994MEDIUMPAN-OS: Predictable temporary file vulnerabilityEPSS 0.2%CVE-2026-20649MEDIUMA logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, waEPSS 0.2%CVE-2022-35631—Filesystem race on temporary filesEPSS 0.2%CVE-2026-40635MEDIUMDell PowerScale OneFS versions 9.12.0.0 through 9.13.1.0 contain an Insecure Temporary File vulnerability. A low privileged remote attacker EPSS 0.2%CVE-2022-4641LOWpig-vector LogisticRegression.java LogisticRegression temp fileEPSS 0.2%CVE-2024-22236LOWIn Spring Cloud Contract, versions 4.1.x prior to 4.1.1, versions 4.0.x prior to 4.0.5, and versions 3.1.x prior to 3.1.10, test execution iEPSS 0.2%CVE-2022-41954LOWTemporary File Information Disclosure VulnerabilityEPSS 0.2%CVE-2026-20651MEDIUMA privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.4, mEPSS 0.2%CVE-2026-47852HIGHPredictable cache directory location allows local ONNX model substitution in Spring AIEPSS 0.2%CVE-2024-6654MEDIUMDenial of Service vulnerability in ESET products for macOSEPSS 0.2%CVE-2025-7707HIGHWorld-Writable NLTK Cache Directory Vulnerability in run-llama/llama_indexEPSS 0.2%CVE-2026-41991LOWPredictable Temporary File in GNU gzipEPSS 0.2%CVE-2026-25645MEDIUMRequests has Insecure Temp File Reuse in its extract_zipped_paths() utility functionEPSS 0.2%