PT-2023-12392 · Qlik · Qlik Nprinting Designer

Ronnie Salomonsen · Publicado 2023-01-26 · Atualizado 2025-04-01 · CVE-2021-41988

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Qlik NPrinting Designer versions prior to 21.14.4.0

Description The issue arises from Qlik NPrinting Designer creating a temporary file in a directory with insecure permissions. This could potentially allow unauthorized access or modification of sensitive data.

Recommendations For versions prior to 21.14.4.0, update to version 21.14.4.0 or later to resolve the issue.

Correção

Exposure of Resource to Wrong Sphere

Enumeração de Fraquezas

CWE-668

Identificadores relacionados

CVE-2021-41988

Produtos afetados

Qlik Nprinting Designer

Referências · 4

• https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0002.md · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2021-41988 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2021-41988 · Aviso do Fabricante
• https://t.me/cvenotify/117199 · Publicação no Telegram