CWE-379 - Creation of Temporary File in Directory with Insecure Permissions

Description

The product creates a temporary file in a directory whose permissions allow unintended actors to determine the file\'s existence or otherwise access that file.

Latest vulnerabilities for CWE-379

Privilege escalation in Adobe Photoshop Elements 2025-02-11
Low Yes

Multiple vulnerabilities in Microsoft .NET 2025-01-15
Medium Yes

Privilege escalation in IO Visor Project bcc 2024-11-06
Low Yes

Privilege escalation in bpftrace 2024-11-06
Low Yes

Denial of service in Siemens TIA Administrator 2024-06-12
Low Yes

Local information disclosure in Spring Cloud Contract 2024-02-02
Low Yes

Multiple vulnerabilities in Intel In-Band Manageability Framework 2024-01-24
High Yes Public exploit

Insecure temporary directory in PyInstaller 2023-12-13
Low Yes

References

Description of CWE-379 on Mitre website