PT-2021-14446 · Oracle · Jdk

Published 2021-03-11 · Updated 2022-10-21 · CVE-2021-21364

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions swagger-codegen versions prior to 2.4.19

Description The issue affects generated code, which remains vulnerable until manually fixed. On Unix-Like systems, the system temporary directory is shared between all local users. When files/directories are created, the default umask settings for the process are respected, resulting in files/directories being created with permissions -rw-r--r-- and drwxr-xr-x respectively, unless an API explicitly sets safe file permissions. The method File.createTempFile from the JDK is vulnerable to this local information disclosure issue.

Recommendations For versions prior to 2.4.19, users can remediate the vulnerability by manually updating the generated source code to use java.nio.files.Files temporary file creation instead of java.io.File. This can be done by changing File.createTempFile(prefix, suffix) to Files.createTempFile(prefix, suffix).toFile(). As a temporary workaround, consider updating the generated code to use the Files API until a patch is available.

Fix

Information Disclosure

Incorrect Permission

Weakness Enumeration

CWE-378

CWE-200

CWE-732

Related Identifiers

CVE-2021-21364

GHSA-HPV8-9RQ5-HQ7W

Affected Products

Jdk

References · 8

• https://github.com/swagger-api/swagger-codegen/commit/35adbd552d5f99b3ff1e0e59da228becc85190f2 · Patch
• https://osv.dev/vulnerability/CVE-2021-21364 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-21364 · Security Note
• https://osv.dev/vulnerability/GHSA-hpv8-9rq5-hq7w · Vendor Advisory
• https://github.com/swagger-api/swagger-codegen/security/advisories/GHSA-hpv8-9rq5-hq7w · Note
• https://t.me/cvenotify/11155 · Telegram Post
• https://t.me/cvenotify/11156 · Telegram Post
• https://t.me/cvenotify/11164 · Telegram Post