Advisories · Weakness
CWE-379.
Every Advisory and CVE whose sources give the weakness CWE-379, newest first.
- CVSS 6.2 Medium
Adobe Premiere Elements Privilege Escalation Vulnerability
- Adobe Premiere
- CWE-379
- CVSS 6.2 Medium
Adobe Photoshop Elements Privilege Escalation Vulnerability - symbolic link
- Adobe Photoshop Elements
- CWE-379
- CVSS 6.2 Medium
Creation of Temporary File in Directory with Insecure Permissions in auto-generated Java, Scala code
- Privilege escalation
- Information disclosure
<5.1.0 · fixed in 5.1.0
GHSA-cqxr-xf2w-943w · CVE-2021-21430 - CVSS 9.3 CriticalCritical · CVSS 9+
Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI-Generator online generator
- Privilege escalation
- Information disclosure
<5.1.0 · fixed in 5.1.0
GHSA-23x4-m842-fmwf · CVE-2021-21428 - CVSS 6.3 Medium
Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19
- CWE-379
>=14.0.3, <14.5.3 || >=15.0.0, <19.0.5 · fixed in 14.5.3, 19.0.5
GHSA-p826-8vhq-h439 · CVE-2021-31411 - CVSS 6.3 Medium
Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19
- CWE-379
>=2.0.9, <2.5.3 || >=3.0.0, <6.0.6 · fixed in 2.5.3, 6.0.6
GHSA-c57f-4vp2-jqhm - CVSS 4.0 Medium
Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI Generator Maven plugin
- Information disclosure
- CWE-377
<5.1.0 · fixed in 5.1.0
GHSA-867q-77cc-98mv · CVE-2021-21429 - CVSS 6.2 Medium
Local information disclosure via system temporary directory
- Information disclosure
- Broken access control
>=2.28, <2.34 || >=3.0.0, <3.0.2 · fixed in 2.34, 3.0.2
GHSA-c43q-5hpj-4crv · CVE-2021-28168 - CVSS 7.8 High
Adobe Digital Editions Arbitrary file system write vulnerability
- Adobe Digital Editions
- CWE-379
- CVSS 8.8 High
Local privilege escalation through system temporary directory
- gradle
- CWE-378
- CWE-379
- CVSS 6.1 Medium
Adobe Creative Cloud installer arbitrary file overwrite vulnerability
- Adobe Creative Cloud (desktop component)
- CWE-379
- CVSS 5.3 Medium
Generator Web Application: Local Privilege Escalation Vulnerability via System Temp Directory
- CWE-378
- CWE-379
<2.4.19 · fixed in 2.4.19
GHSA-pc22-3g76-gm6j · CVE-2021-21363 - CVSS 3.0 Low
Local Information Disclosure Vulnerability
- CWE-378
- CWE-379
>=1.0.0-beta.6, <1.0.0-beta.9 · fixed in 1.0.0-beta.9
GHSA-2cxf-6567-7pp6 · CVE-2021-21331 - CVSS 6.2 Medium
Local Information Disclosure Vulnerability in Netty on Unix-Like systems
- Information disclosure
- CWE-378
* · no fixed version yet
GHSA-5mcr-gq6c-3hq2 · CVE-2021-21290 - CVSS 7.5 High
Code injection in Apache Ant
- Other injection
- Code injection
<1.10.9 · fixed in 1.10.9
GHSA-f62v-xpxf-3v68 · CVE-2020-11979 - CVSS 5.5 Medium
Information Disclosure in Apache Groovy
- CWE-379
>=2.0.0, <2.4.21 || >=2.5.0, <2.5.14 || >=3.0.0, <3.0.7 · fixed in 2.4.21, 2.5.14, 3.0.7
GHSA-rcjj-h6gh-jf3r · CVE-2020-17521 - CVSS 7.0 High
Local Temp Directory Hijacking Vulnerability
- Information disclosure
- CWE-378
<9.4.33.v20201020 || >=10.0.0.beta1, <10.0.0.beta3 || >=11.0.0.beta1, <11.0.0.beta3 · fixed in 9.4.33.v20201020, 10.0.0.beta3, 11.0.0.beta3
GHSA-g3wg-6mcf-8jj6 · CVE-2020-27216 - CVSS 6.5 Medium
World writable root owned lock file created in user controllable location
- Canonical Apport
- CWE-379
-
On Windows endpoints, the SecureConnector agent is vulnerable to privilege escalation whereby an authenticated unprivileged user can obtain administrator privileges on the endpoint because files are…
- Microsoft Windows SecureConnector agent
- CWE-379
- CVSS 6.1 Medium
Packstack: red hat openstack: packstack: unauthorized system modification via insecure answer file creation
- Red Hat OpenStack Folsom for RHEL 6
- Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse)
- CWE-379