Skip to main content

Creation of Temporary File in Directory with Insecure Permissions

CVE-2022-3952

High
7.1/10

Summary

A vulnerability has been found in ManyDesigns Portofino through 5.3.2 and classified as problematic. Affected by this vulnerability is the function "createTempDir" of the file "WarFileLauncher.java". The manipulation leads to creation of temporary file in directory with insecure permissions. Upgrading to version 5.3.3 is able to address this issue. It is recommended to upgrade the affected component.

  • LOW
  • LOCAL
  • HIGH
  • UNCHANGED
  • NONE
  • LOW
  • HIGH
  • NONE

CWE-379 - Creation of Temporary File in Directory with Insecure Permissions

The software creates a temporary file in a directory whose permissions allow unintended actors to determine the file's existence or otherwise access that file.

References

Advisory Timeline

  • Published