Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2023-0482

Date: February 16, 2023

In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user.

Language: Java

Severity Score

Related Resources (8)

https://github.com/resteasy/resteasy/pull/3409/commits/807d7456f2137cde8ef7c316707211bf4e542d56
https://github.com/resteasy/Resteasy
https://security.netapp.com/advisory/ntap-20230427-0001
https://security.netapp.com/advisory/ntap-20230427-0001/
https://access.redhat.com/security/cve/CVE-2023-0482
https://nvd.nist.gov/vuln/detail/CVE-2023-0482
https://issues.redhat.com/browse/RESTEASY-3286
https://www.mend.io/vulnerability-database/CVE-2023-0482

Severity Score

Weakness Type (CWE)

Creation of Temporary File With Insecure Permissions

CWE-378

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): NONE
Availability (A): NONE

Do you need more information?

Contact Us