Lucene search
Veracode Vulnerability DatabaseVERACODE:38795HistoryJan 08, 2023 - 3:34 a.m.
Information Disclosure
2023-01-0803:34:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
vulnerable
information disclosure
temporary file configuration
createstorageoutputstream
tempfilestorageprovider
permissions
attacker
file content
0.0004 Low
EPSS
Percentile
5.1%
apache-mime4j-storage is vulnerable to Information Disclosure. The vulnerability exists due to insecure default temporary file configuration in the createStorageOutputStream function in TempFileStorageProvider.java, which creates a file with the permissions -rw-r--r--, allowing an attacker to read the content of the file.
Related
ibm
ibm
Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Apache James MIME4J
2023-05-02 21:50:51
prion
prion
Information disclosure
2023-01-06 10:15:00
nvd
nvd
CVE-2022-45787
2023-01-06 10:15:10
cve
cve
CVE-2022-45787
2023-01-06 10:15:10
github
github
Apache James MIME4J vulnerable to information disclosure to local users
2023-01-06 12:31:34
cvelist
cvelist
osv
osv
Apache James MIME4J vulnerable to information disclosure to local users
2023-01-06 12:31:34
cnvd
cnvd
Apache James licensing issue vulnerability
2023-01-11 00:00:00
redhatcve
redhatcve
CVE-2022-45787
2023-03-14 19:43:01
redhat
redhat
nessus
nessus
oracle
oracle
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00