Skip to content
OpenAdvisories

Weakness (CWE)

CWE-377: DEPRECATED: Insecure Temporary File

Class Deprecated Mapping prohibited

This entry has been deprecated. It was focused
only on the affected resource (temporary file) and not the
behavior or mistake that produced the insecure temporary
file, which caused confusion and incorrect
mappings.

Source: MITRE CWE-377

5 results · Clear filters · Feed

  • Critical 9.3

    Insecure Temporary File Creation in Robocode's AutoExtract Component

    An insecure temporary file creation vulnerability exists in the AutoExtract component of Robocode version 1.9.3.6. The createTempFile method fails to securely create temporary files, allowing attackers to exploit race conditions and potentially execute arbitr…

  • Critical 9.9

    A file write vulnerability exists in the httpd upload.cgi functionality of InHand Networks InRouter302 V3.5.4. A specia…

  • Critical 9.1

    Insecure Temporary File in SWHKD

    SWHKD 1.1.5 unsafely uses the /tmp/swhkd.pid pathname. There can be an information leak or denial of service.

  • Critical 9.3

    Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI-Generator online generator

    Openapi generator is a java tool which allows generation of API client libraries (SDK generation), server stubs, documentation and configuration automatically given an OpenAPI Spec. openapi-generator-online creates insecure temporary folders with File.createT…

  • Critical 9.8

    The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name col…