PT-2019-7086 · Pen · Pen

Marcus Meissner + 1 · Publicado 2019-12-13 · Atualizado 2019-12-19 · CVE-2014-2387

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Pen version 0.18.0

Description The issue is related to Insecure Temporary File Creation.

Recommendations For Pen version 0.18.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exposure of Resource to Wrong Sphere

Enumeração de Fraquezas

CWE-668

Identificadores relacionados

CVE-2014-2387

Produtos afetados

Pen

Referências · 10

• https://osv.dev/vulnerability/DEBIAN-CVE-2014-2387 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2014-2387 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-2387 · Nota
• https://osv.dev/vulnerability/CVE-2014-2387 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2014/03/13/5 · Nota
• http://securityfocus.com/bid/66214 · Nota
• http://openwall.com/lists/oss-security/2014/03/14/2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/91992 · Nota
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2014-2387 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-2387 · Nota de Segurança