PT-2022-26181 · Mpxj · Mpxj

Jlleitschuh · Published 2022-11-25 · Updated 2023-09-07 · CVE-2022-41954

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions MPXJ versions prior to 10.14.1

Description MPXJ is an open source library to read and write project plans from a variety of file formats and databases. On Unix-like operating systems, MPXJ's use of File.createTempFile(..) results in temporary files being created with the permissions -rw-r--r--. This means that any other user on the system can read the contents of this file. When MPXJ is reading a schedule file which requires the creation of a temporary file or directory, a knowledgeable local user could locate these transient files while they are in use and would then be able to read the schedule being processed by MPXJ.

Recommendations For versions prior to 10.14.1, update to MPXJ version 10.14.1 or later to resolve the issue. As a temporary workaround for users unable to upgrade, set java.io.tmpdir to a directory to which only the user running the application has access to prevent other users from accessing these temporary files.

Exploit

Fix

Information Disclosure

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-377

CWE-200

CWE-668

Related Identifiers

CVE-2022-41954

GHSA-JF2P-4GQJ-849G

PYSEC-2022-42996

Affected Products

Mpxj

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/41xxx/CVE-2022-41954.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-41954 · Security Note
• https://osv.dev/vulnerability/PYSEC-2022-42996 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-41954 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-jf2p-4gqj-849g · Vendor Advisory
• https://github.com/joniles/mpxj/commit/287ad0234213c52b0638565e14bd9cf3ed44cedd · Note
• https://github.com/joniles/mpxj/security/advisories/GHSA-jf2p-4gqj-849g · Note
• https://github.com/joniles/mpxj/commit/ae0af24345d79ad45705265d9927fe55e94a5721 · Note
• https://github.com/joniles/mpxj · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/mpxj/PYSEC-2022-42996.yaml · Note
• https://t.me/cvenotify/53761 · Telegram Post
• https://t.me/cvenotify/38492 · Telegram Post
• https://t.me/cvenotify/38867 · Telegram Post