VDB
CVE-2021-22572
CVE-2021-22572
PUBLISHED
CVSS 5.5 MEDIUM
On unix-like systems, the system temporary directory is shared between all users on that system. The root cause is File.createTempFile creates files in the the system temporary directory with world readable permissions. Any sensitive information written to theses files is visible to all other local users on unix-like systems. We recommend upgrading past commit https://github.com/google/data-transfer-project/pull/969
EPSS 0.13% · 3.2th percentile
Risk Scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.13%
3.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Google LLC | Data-Transfer-Project | unspecified |
| data_transfer_project | 0 |
Timeline
- Mar 29, 2022 CVE Published
- Mar 30, 2022 EPSS Score
- May 10, 2022 CVE Updated
- May 20, 2022 EPSS Score
- Jul 10, 2022 EPSS Score
- Aug 30, 2022 EPSS Score
- Oct 20, 2022 EPSS Score
- Dec 10, 2022 EPSS Score
- Jan 30, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 22, 2023 EPSS Score
- May 11, 2023 EPSS Score