CVE-2021-22572
Medium
Description
On unix-like systems, the system temporary directory is shared between all users on that system. The root cause is File.createTempFile creates files in the the system temporary directory with world readable permissions. Any sensitive information written to theses files is visible to all other local users on unix-like systems. We recommend upgrading past commit https://github.com/google/data-transfer-project/pull/969
SeverityMedium
CVSS5.5
Exploit probability3. percentile0.1%
Product
Google Data Transfer Project
PublishedMar 29, 2022
First seenMar 29, 2022
Weakness typeCWE-377CWE-377
How to fix
Update
- google data_transfer_project0.3.57 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| google data_transfer_project | v < 0.3.57 | 0.3.57 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.