Description
Priam uses File.createTempFile, which gives the permissions on that file -rw-r--r--. An attacker with read access to the local filesystem can read anything written there by the Priam process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Netflix OSS Priam | All versions | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.netflix.priam:priam | <= 3.1.104 | — | GHSA-f4jh-ww96-9h9j |