Directory Hijacking

2022-11-1710:46:15

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

directory hijacking

file disclosure

createtempdir

warfilelauncher

sensitive information

software vulnerability

EPSS

Percentile

15.5%

JSON

com.manydesigns:portofino-microservice-launcher is vulnerable to directory hijacking. A local authenticated attacker is able to create temporary files inside unauthorized directories through createTempDir function of the file WarFileLauncher.java, resulting in disclosure of sensitive information and directory hijacking.