VDB
CVE-2023-43782
CVE-2023-43782
PUBLISHED
Cadence through 0.9.2 2023-08-21 uses an Insecure /tmp/.cadence-aloop-daemon.x Temporary File. The file is used even if it has been created by a local adversary before Cadence started. The adversary can then delete the file, disrupting Cadence.
EPSS 0.02% · 5.0th percentile
Risk Scores
EPSS Score
0.02%
5.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | * |
| falktx | cadence | 0 |
Timeline
- Sep 22, 2023 CVE Published
- Sep 22, 2023 EPSS Score
- Oct 24, 2023 EPSS Score
- Nov 25, 2023 EPSS Score
- Dec 27, 2023 EPSS Score
- Jan 28, 2024 EPSS Score
- Mar 1, 2024 EPSS Score
- Apr 2, 2024 EPSS Score
- May 4, 2024 EPSS Score
- Jun 5, 2024 EPSS Score
- Jul 7, 2024 EPSS Score
- Aug 8, 2024 EPSS Score