Skip to content
OpenAdvisories
High · 7.8 CVE-2023-5936 EUVD-2023-58208GHSA-r73q-j7fc-5g2p

Unsafe temporary data privileges on Unix systems in Arc before v1.6.0

Published May 15, 2024 · Updated Aug 2, 2024 · Assigned by Nozomi

Description

On Unix systems (Linux, MacOS), Arc uses a temporary file with unsafe privileges.

By tampering with such file, a malicious local user in the system may be able to trigger arbitrary code execution with root privileges.

Affected products

VendorProductAffectedFixed
Nozomi Networks Arc < 1.6.0 1.6.0

References