# CWE-377. Every Advisory and CVE whose sources give the weakness CWE-377, newest first. ## Records, newest first (an older page) - [Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible](https://agentprime.io/advisories/GHSA-77g3-3j5w-64w4.md) `GHSA-77g3-3j5w-64w4`, `CVE-2020-10685`, `PYSEC-2020-1` · PyPI `ansible`: affected `>=2.7.0a1, <2.7.17 || >=2.8.0a1, <2.8.11 || >=2.9.0a1, <2.9.7`, fixed in `2.7.17`, `2.8.11`, `2.9.7` · CVSS 5.0 Medium · Not analysed yet · Published 7 Apr 2021 · Tags: Information disclosure, CWE-377, CWE-459 - [Netflix/Priam: Temporary Directory Information Disclosure](https://agentprime.io/advisories/GHSA-f4jh-ww96-9h9j.md) `GHSA-f4jh-ww96-9h9j`, `CVE-2021-28100` · Maven `com.netflix.priam:priam`: affected `<=3.1.104`, no fixed version yet · CVSS 6.2 Medium · Not analysed yet · Published 30 Mar 2021 · Tags: CWE-377 - [Insecure temporary file in Netflix OSS Hollow](https://agentprime.io/advisories/GHSA-9295-mhf3-v33m.md) `GHSA-9295-mhf3-v33m`, `CVE-2021-28099` · Maven `com.netflix.hollow:hollow`: affected `<=6.1.0`, no fixed version yet · CVSS 4.4 Medium · Not analysed yet · Published 29 Mar 2021 · Tags: CWE-377 - [Oozie local privilege escalation](https://agentprime.io/advisories/CVE-2020-35451.md) `CVE-2020-35451` · CVE record: Apache Software Foundation Apache Oozie · No CVSS score · Not analysed yet · Published 9 Mar 2021 · Tags: CWE-377 - [Local privilege escalation to root due to insecure tmp file usage](https://agentprime.io/advisories/CVE-2020-8032.md) `CVE-2020-8032` · CVE record: openSUSE Factory · CVSS 6.7 Medium · Not analysed yet · Published 25 Feb 2021 · Tags: CWE-377 - [openldap uses fixed paths in /tmp](https://agentprime.io/advisories/CVE-2020-8027.md) `CVE-2020-8027` · CVE record: SUSE SUSE Linux Enterprise Server 15-LTSS and 3 more · CVSS 7.3 High · Not analysed yet · Published 11 Feb 2021 · Tags: CWE-377 - [skuba: Insecure /tmp usage when joining node to cluster](https://agentprime.io/advisories/CVE-2020-8030.md) `CVE-2020-8030` · CVE record: SUSE SUSE CaaS Platform 4.5 · CVSS 3.6 Low · Not analysed yet · Published 11 Feb 2021 · Tags: CWE-377 - [Files accessible to external parties in AWS Community Community Collections](https://agentprime.io/advisories/CVE-2020-25636.md) `CVE-2020-25636` · CVE record: AWS Community Community Collections · CVSS 6.6 Medium · Not analysed yet · Published 5 Oct 2020 · Tags: Information disclosure, CWE-377 - [PAN-OS: Temporary file race condition vulnerability in PAN-OS leads to local privilege escalation](https://agentprime.io/advisories/CVE-2020-2016.md) `CVE-2020-2016` · CVE record: Palo Alto Networks PAN-OS · CVSS 7.0 High · Not analysed yet · Published 13 May 2020 · Tags: CWE-377 - [PAN-OS: Predictable temporary file vulnerability](https://agentprime.io/advisories/CVE-2020-1994.md) `CVE-2020-1994` · CVE record: Palo Alto Networks PAN-OS · CVSS 4.1 Medium · Not analysed yet · Published 13 May 2020 · Tags: CWE-377 - [Traps: Insecure temporary file vulnerability may allow privilege escalation on Windows](https://agentprime.io/advisories/CVE-2020-1991.md) `CVE-2020-1991` · CVE record: Palo Alto Networks Traps and 1 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2020 · Tags: CWE-377 - [PAN-OS: Predictable temporary filename vulnerability allows local privilege escalation](https://agentprime.io/advisories/CVE-2020-1981.md) `CVE-2020-1981` · CVE record: Palo Alto Networks PAN-OS · CVSS 7.0 High · Not analysed yet · Published 11 Mar 2020 · Tags: CWE-377 - [Static tempfile name allows overwriting of arbitrary files](https://agentprime.io/advisories/CVE-2018-17955.md) `CVE-2018-17955` · CVE record: SUSE yast2-multipath · CVSS 2.2 Low · Not analysed yet · Published 15 Mar 2019 · Tags: CWE-377 - [Code execution if run with command line switch -v](https://agentprime.io/advisories/CVE-2018-19640.md) `CVE-2018-19640` · CVE record: SUSE supportutils · CVSS 4.4 Medium · Not analysed yet · Published 5 Mar 2019 · Tags: CWE-377 - [User can overwrite arbitrary log files in support tar](https://agentprime.io/advisories/CVE-2018-19638.md) `CVE-2018-19638` · CVE record: SUSE supportutils · CVSS 2.2 Low · Not analysed yet · Published 5 Mar 2019 · Tags: CWE-377 - [Static temporary filename allows overwriting of files](https://agentprime.io/advisories/CVE-2018-19637.md) `CVE-2018-19637` · CVE record: SUSE supportutils · CVSS 2.8 Low · Not analysed yet · Published 5 Mar 2019 · Tags: CWE-377 - [McAfee Agent (MA) non-Windows versions incorrect use of temporary file vulnerability](https://agentprime.io/advisories/CVE-2018-6706.md) `CVE-2018-6706` · CVE record: McAfee McAfee Agent (MA) for Linux · CVSS 2.3 Low · Not analysed yet · Published 12 Dec 2018 · Tags: CWE-377 - [McAfee Agent (MA) for Linux Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2018-6705.md) `CVE-2018-6705` · CVE record: McAfee McAfee Agent (MA) for Linux · CVSS 2.3 Low · Not analysed yet · Published 12 Dec 2018 · Tags: CWE-377 - [McAfee Agent for Linux Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2018-6704.md) `CVE-2018-6704` · CVE record: McAfee McAfee Agent (MA) for Linux · CVSS 4.7 Medium · Not analysed yet · Published 12 Dec 2018 · Tags: CWE-377 - [Tmp files readable by other users in sync-exec](https://agentprime.io/advisories/GHSA-38h8-x697-gh8q.md) `GHSA-38h8-x697-gh8q`, `CVE-2017-16024` · npm `sync-exec`: affected `<=0.6.2`, no fixed version yet · CVSS 6.5 Medium · Not analysed yet · Published 9 Nov 2018 · Tags: CWE-377 - [Insecure temporary file in Foreman katello-debug](https://agentprime.io/advisories/CVE-2016-9595.md) `CVE-2016-9595` · CVE record: Foreman katello-debug · CVSS 7.3 High · Not analysed yet · Published 27 Jul 2018 · Tags: CWE-377 - [Insecure temporary file in GitLab Community and Enterprise Editions](https://agentprime.io/advisories/CVE-2018-3710.md) `CVE-2018-3710` · CVE record: GitLab GitLab Community and Enterprise Editions · No CVSS score · Not analysed yet · Published 21 Mar 2018 · Tags: CWE-377 - [Insecure temporary file in postgresql](https://agentprime.io/advisories/CVE-2018-1053.md) `CVE-2018-1053` · CVE record: The PostgreSQL Global Development Group postgresql · No CVSS score · Not analysed yet · Published 9 Feb 2018 · Tags: CWE-377 - [Phusion Passenger Denial of Service](https://agentprime.io/advisories/GHSA-9qj7-jvg4-qr2x.md) `GHSA-9qj7-jvg4-qr2x`, `CVE-2013-2119` · RubyGems `passenger`: affected `<3.0.21 || >=4.0.1, <4.0.5`, fixed in `3.0.21`, `4.0.5` · No CVSS score · Not analysed yet · Published 24 Oct 2017 · Tags: CWE-377 - [Insecure temporary file in Red Hat, Inc. rhnsd](https://agentprime.io/advisories/CVE-2017-7560.md) `CVE-2017-7560` · CVE record: Red Hat, Inc. rhnsd · No CVSS score · Not analysed yet · Published 13 Sept 2017 · Tags: CWE-377 - [The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly other attacks.](https://agentprime.io/advisories/CVE-2015-5224.md) `CVE-2015-5224` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Aug 2017 · Tags: CWE-377 Newest: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .