CVE-2017-8418 in RuboCop
Résumé (Anglaise)
RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users.
Réserver
02/05/2017
Divulgation
02/05/2017
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 100810 | RuboCop Cache tmp élévation de privilèges | 254 | Non défini | Non défini | CVE-2017-8418 |