CVE-2017-8418 in RuboCop

摘要 (英语)

RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

预定

2017-05-02

披露

2017-05-02

状态

已确认

条目

VulDB provides additional information and datapoints for this CVE:

标识符	漏洞	CWE	可利用	对策	CVE
100810	RuboCop Cache tmp 权限提升	254	未定义	未定义	CVE-2017-8418

来源

• MITRE
• NVD
• CVE Details