CWE-377.

Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible

• Information disclosure
• CWE-377

>=2.7.0a1, <2.7.17 || >=2.8.0a1, <2.8.11 || >=2.9.0a1, <2.9.7 · fixed in 2.7.17, 2.8.11, 2.9.7

Netflix/Priam: Temporary Directory Information Disclosure

• CWE-377

<=3.1.104 · no fixed version yet

Insecure temporary file in Netflix OSS Hollow

• CWE-377

<=6.1.0 · no fixed version yet

Oozie local privilege escalation

• Apache Software Foundation Apache Oozie
• CWE-377

Local privilege escalation to root due to insecure tmp file usage

• openSUSE Factory
• CWE-377

openldap uses fixed paths in /tmp

• SUSE Linux Enterprise Server 15-LTSS
• SUSE Linux Enterprise Server for SAP 15
• CWE-377

skuba: Insecure /tmp usage when joining node to cluster

• SUSE CaaS Platform 4.5
• CWE-377

Files accessible to external parties in AWS Community Community Collections

• AWS Community Community Collections
• Information disclosure
• CWE-377

PAN-OS: Temporary file race condition vulnerability in PAN-OS leads to local privilege escalation

• Palo Alto Networks PAN-OS
• CWE-377

PAN-OS: Predictable temporary file vulnerability

• Palo Alto Networks PAN-OS
• CWE-377

Traps: Insecure temporary file vulnerability may allow privilege escalation on Windows

• Palo Alto Networks Traps
• Palo Alto Networks Cortex XDR
• CWE-377

PAN-OS: Predictable temporary filename vulnerability allows local privilege escalation

• Palo Alto Networks PAN-OS
• CWE-377

Static tempfile name allows overwriting of arbitrary files

• SUSE yast2-multipath
• CWE-377

Code execution if run with command line switch -v

• SUSE supportutils
• CWE-377

User can overwrite arbitrary log files in support tar

• SUSE supportutils
• CWE-377

Static temporary filename allows overwriting of files

• SUSE supportutils
• CWE-377

McAfee Agent (MA) non-Windows versions incorrect use of temporary file vulnerability

• McAfee Agent (MA) for Linux
• CWE-377

McAfee Agent (MA) for Linux Privilege Escalation vulnerability

• McAfee Agent (MA) for Linux
• CWE-377

McAfee Agent for Linux Privilege Escalation vulnerability

• McAfee Agent (MA) for Linux
• CWE-377

Tmp files readable by other users in sync-exec

• CWE-377

<=0.6.2 · no fixed version yet

Insecure temporary file in Foreman katello-debug

• Foreman katello-debug
• CWE-377

Insecure temporary file in GitLab Community and Enterprise Editions

• GitLab Community and Enterprise Editions
• CWE-377

Insecure temporary file in postgresql

• postgresql
• CWE-377

Phusion Passenger Denial of Service

• CWE-377

<3.0.21 || >=4.0.1, <4.0.5 · fixed in 3.0.21, 4.0.5

Insecure temporary file in Red Hat, Inc. rhnsd

• Red Hat, Inc. rhnsd
• CWE-377

The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly other attacks.

• CWE-377