PT-2021-14445 · Oracle · Jdk

Frantuma + 1 · Published 2021-03-11 · Updated 2021-03-18 · CVE-2021-21363

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Critical

Base vector

AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions swagger-codegen versions prior to 2.4.19

Description The system's temporary directory is shared between all users on Unix-like systems, allowing a collocated user to observe and race to complete the creation of a temporary subdirectory. This is a local privilege escalation issue because an attacker can append to the contents of the outputFolder and control code written to this directory when executed. The method File.createTempFile from the JDK is vulnerable to this local information disclosure issue.

Recommendations For versions prior to 2.4.19, update to version 2.4.19 to fix the vulnerability. As a temporary workaround, consider avoiding the use of the File.createTempFile method and instead use the Files API for creating temporary directories, which does not contain the race condition and sets the correct file permissions. Restrict access to the temporary directory to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-379

CWE-378

Related Identifiers

CVE-2021-21363

GHSA-PC22-3G76-GM6J

Affected Products

Jdk

References · 8

• 🔥 https://github.com/swagger-api/swagger-codegen/security/advisories/GHSA-pc22-3g76-gm6j · Exploit
• https://github.com/swagger-api/swagger-codegen/commit/987ea7a30b463cc239580d6ad166c707ae942a89 · Patch
• https://osv.dev/vulnerability/CVE-2021-21363 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-21363 · Security Note
• https://osv.dev/vulnerability/GHSA-pc22-3g76-gm6j · Vendor Advisory
• https://t.me/cvenotify/11156 · Telegram Post
• https://t.me/cvenotify/11155 · Telegram Post
• https://t.me/cvenotify/11164 · Telegram Post