CVE-2021-20202

HIGH Year: 2021
CVSS v3 Score
7.3
High
CVSS v2 Score
4.6
Medium
Weakness Type
CWE-377
View all →

Vulnerability Description

A flaw was found in keycloak. Directories can be created prior to the Java process creating them in the temporary directory, but with wider user permissions, allowing the attacker to have access to the contents that keycloak stores in this directory. The highest threat from this vulnerability is to data confidentiality and integrity.

Related Vulnerabilities

CVE-2013-4253

HIGH
CVSS:7.5(High)

The deployment script in the unsupported "OpenShift Extras" set of add-on scripts, in Red Hat Openshift 1, installs a default public key in the root user's authorized_keys file.

CWE-3772013

CVE-2020-1991

HIGH
CVSS:7.1(High)

An insecure temporary file vulnerability in Palo Alto Networks Traps allows a local authenticated Windows user to escalate privileges or overwrite system files. This issue affects Palo Alto Networks T...

CWE-3772020

CVE-2020-25636

HIGH
CVSS:7.1(High)

A flaw was found in Ansible Base when using the aws_ssm connection plugin as there is no namespace separation for file transfers. Files are written directly to the root bucket, making possible to have...

CWE-3772020

CVE-2022-3952

HIGH
CVSS:7.1(High)

A vulnerability has been found in ManyDesigns Portofino 5.3.2 and classified as problematic. Affected by this vulnerability is the function createTempDir of the file WarFileLauncher.java. The manipula...

CWE-3772022

CVE-2018-1053

HIGH
CVSS:7.0(High)

In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2, pg_upgrade creates file in current working directory containing the output of `pg_...

CWE-3772018

CVE-2020-2016

HIGH
CVSS:7.0(High)

A race condition due to insecure creation of a file in a temporary directory vulnerability in PAN-OS allows for root privilege escalation from a limited linux user account. This allows an attacker who...

CWE-3772020