Fallos del tipo CWE-377

98 resultados

Arquivo temporário inseguro

A aplicação cria arquivos temporários com permissões previsíveis ou sem isolamento adequado, permitindo que outros usuários do sistema leiam, modifiquem ou substituam esses arquivos. Isso expõe dados sensíveis ou permite injeção de conteúdo malicioso que a aplicação depois processa.

Ejemplo

Um programa cria `/tmp/dados_usuario_12345.txt` com permissões 644 (legível globalmente) para armazenar temporariamente credenciais antes de criptografá-las. Outro usuário da máquina lê o arquivo e rouba as credenciais, ou substitui o conteúdo antes da aplicação processá-lo.

Cómo mitigar

Use APIs seguras (`mkstemp`, `tmpfile`, `Files.createTempFile`) que geram nomes aleatórios e garantem permissões restritivas (0600). Armazene temporários em diretórios isolados por usuário ou processo, e delete imediatamente após uso. Nunca construa nomes de arquivo com valores previsíveis em `/tmp`.

CVE-2020-2016HIGHPAN-OS: Temporary file race condition vulnerability in PAN-OS leads to local privilege escalationEPSS 0.6%CVE-2022-3969LOWOpenKM FileUtils.java getFileExtension temp fileEPSS 0.5%CVE-2022-4817LOWcentic9 jgit-cookbook temp fileEPSS 0.5%CVE-2021-29429MEDIUMInformation disclosure through temporary directory permissionsEPSS 0.5%CVE-2018-1053—In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2, pg_upgrade creates filEPSS 0.5%CVE-2022-41946MEDIUMTemporaryFolder on unix-like systems does not limit access to created files in pgjdbcEPSS 0.5%CVE-2018-19637LOWStatic temporary filename allows overwriting of filesEPSS 0.5%CVE-2020-35451—Oozie local privilege escalationEPSS 0.4%CVE-2026-44878HIGHAuthenticated Path Traversal allows Unauthorized Access in Web InterfaceEPSS 0.4%CVE-2020-1733MEDIUMA race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unpriviEPSS 0.4%CVE-2016-9595HIGHA flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files. A local user could exploitEPSS 0.4%CVE-2018-19638LOWUser can overwrite arbitrary log files in support tarEPSS 0.4%CVE-2017-15111—keycloak-httpd-client-install versions before 0.8 insecurely creates temporary file allowing local attackers to overwrite other files via syEPSS 0.4%CVE-2018-6705LOWMcAfee Agent (MA) for Linux Privilege Escalation vulnerabilityEPSS 0.4%CVE-2020-8032MEDIUMLocal privilege escalation to root due to insecure tmp file usageEPSS 0.4%CVE-2020-1740LOWA flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another EPSS 0.4%CVE-2018-6704MEDIUMMcAfee Agent for Linux Privilege Escalation vulnerabilityEPSS 0.4%CVE-2020-1981HIGHPAN-OS: Predictable temporary filename vulnerability allows local privilege escalationEPSS 0.4%CVE-2025-66625MEDIUMUmbraco Vulnerable to Improper File Access and Credential Exposure through Dictionary Import FunctionalityEPSS 0.4%CVE-2017-7549—A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack PlatformEPSS 0.4%