Description
A local attacker could read files from some other users' SA360 reports stored in the /tmp folder during staging process before the files are loaded in BigQuery. We recommend upgrading to version 1.0.3 or above.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| google/sa360-webquery-bigquery | unspecified – ≤ 1.0.2 | — |