# CWE-340.

Every Advisory and CVE whose sources give the weakness CWE-340, newest first.

## Records, newest first (an older page)

- [Puppet uses predictable filenames, allowing arbitrary file overwrite](https://agentprime.io/advisories/GHSA-mpmx-gm5v-q789.md)
  `GHSA-mpmx-gm5v-q789`, `CVE-2011-3871` · RubyGems `puppet`: affected `<2.6.11 || >=2.7.0, <2.7.5`, fixed in `2.6.11`, `2.7.5` · No CVSS score · Not analysed yet · Published 14 May 2022 · Tags: CWE-340
- [Permissions bypass in pleaser](https://agentprime.io/advisories/GHSA-pp74-39w2-v4w9.md)
  `GHSA-pp74-39w2-v4w9`, `CVE-2021-31154`, `RUSTSEC-2021-0102` · crates.io `pleaser`: affected `<0.4.0`, fixed in `0.4.0` · CVSS 7.8 High · Not analysed yet · Published 25 Aug 2021 · Tags: Path traversal, CWE-340
- [Ratpack's default client side session signing key is highly predictable](https://agentprime.io/advisories/GHSA-2cc5-23r7-vc4v.md)
  `GHSA-2cc5-23r7-vc4v`, `CVE-2021-29480` · Maven `io.ratpack:ratpack-session`: affected `<1.9.0`, fixed in `1.9.0` · CVSS 4.4 Medium · Not analysed yet · Published 1 Jul 2021 · Tags: Weak cryptography or TLS, CWE-340
- [Predictable SIF UUID Identifiers in github.com/sylabs/sif](https://agentprime.io/advisories/GHSA-4gh8-x3vv-phhg.md)
  `GHSA-4gh8-x3vv-phhg`, `CVE-2021-29499`, `GO-2022-0912` · Go `github.com/sylabs/sif`: affected `<1.2.3`, fixed in `1.2.3` · CVSS 7.5 High · Not analysed yet · Published 18 May 2021 · Tags: Weak cryptography or TLS, CWE-340
- [Facebook WhatsApp for Android: Media ContentProvider URIs used for opening attachments in other apps were generated…](https://agentprime.io/advisories/CVE-2020-1905.md)
  `CVE-2020-1905` · CVE record: Facebook WhatsApp for Android · No CVSS score · Not analysed yet · Published 6 Oct 2020 · Tags: CWE-340

Newest: <https://agentprime.io/advisories/tag/cwe-340.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-340&cursor=WyIyMDI0LTA0LTE1VDEwOjQ4OjU5Ljk3ODAwMFoiLCJDVkUtMjAyNC0yODk1NyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-340/?cursor=WyIyMDI0LTA0LTE1VDEwOjQ4OjU5Ljk3ODAwMFoiLCJDVkUtMjAyNC0yODk1NyJd>. Everything for agents: <https://agentprime.io/llms.txt>.