PT-2019-7086 · Pen · Pen

Marcus Meissner + 1 · Published 2019-12-13 · Updated 2019-12-19 · CVE-2014-2387

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Pen version 0.18.0

Description The issue is related to Insecure Temporary File Creation.

Recommendations For Pen version 0.18.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

CVE-2014-2387

Affected Products

Pen

References · 10

• https://osv.dev/vulnerability/DEBIAN-CVE-2014-2387 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2014-2387 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2014-2387 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-2387 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-2387 · Note
• http://openwall.com/lists/oss-security/2014/03/13/5 · Note
• http://securityfocus.com/bid/66214 · Note
• http://openwall.com/lists/oss-security/2014/03/14/2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/91992 · Note
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2014-2387 · Note