Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38903
HistoryJan 18, 2023 - 2:38 a.m.

Insecure Temporary File

2023-01-1802:38:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
globalpomutils-fileresources
vulnerability
insecure temporary files
file.createtempfile
createtmpdir method
fileresourcemanagerprovider.java
temporary directory
default permissions
potentially sensitive files
sensitive information disclosure
software

0.002 Low

EPSS

Percentile

53.4%

globalpomutils-fileresources is vulnerable to Insecure Temporary Files. The vulnerability exists due to the File.createTempFile function in the createTmpDir method of FileResourceManagerProvider.java, which creates a temporary directory with default permissions. This directory has READ all permissions, allowing an attacker access to potentially sensitive files, which results in Sensitive Information Disclosure.

0.002 Low

EPSS

Percentile

53.4%

Related for VERACODE:38903