CVE-2017-8418 in RuboCop
Summary
RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
05/02/2017
Disclosure
05/02/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 100810 | RuboCop Cache File tmp 7pk security | 254 | Not defined | Not defined | CVE-2017-8418 |