{"id":"GHSA-g5m2-22h2-rr3j","summary":"Creation of Temporary File With Insecure Permissions in logilab-commons","details":"The Execute class in shellutils in logilab-common before 0.61.0 uses tempfile.mktemp, which allows local users to have an unspecified impact by pre-creating the temporary file.","aliases":["CVE-2014-1839","PYSEC-2014-84"],"modified":"2024-09-30T17:21:04.650518Z","published":"2022-05-14T02:09:23Z","database_specific":{"github_reviewed_at":"2022-07-07T22:48:13Z","nvd_published_at":"2014-03-11T19:37:00Z","cwe_ids":["CWE-378"],"severity":"MODERATE","github_reviewed":true},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2014-1839"},{"type":"WEB","url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737051"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-g5m2-22h2-rr3j"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/logilab-common/PYSEC-2014-84.yaml"},{"type":"WEB","url":"http://comments.gmane.org/gmane.comp.security.oss.general/11986"},{"type":"WEB","url":"http://lists.opensuse.org/opensuse-updates/2014-02/msg00085.html"},{"type":"WEB","url":"http://www.logilab.org/ticket/207562"}],"affected":[{"package":{"name":"logilab-common","ecosystem":"PyPI","purl":"pkg:pypi/logilab-common"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.61.0"}]}],"versions":["0.28.1","0.38.0","0.38.1","0.39.0","0.43.0","0.44.0","0.46.0","0.46.1","0.47.0","0.48.1","0.49.0","0.50.0","0.50.1","0.50.2","0.50.3","0.51.0","0.51.1","0.52.0","0.52.1","0.53.0","0.54.0","0.55.0","0.55.2","0.56.0","0.56.1","0.56.2","0.57.0","0.57.1","0.58.1","0.58.3","0.59.0","0.59.1","0.60.0","0.60.1"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-g5m2-22h2-rr3j/GHSA-g5m2-22h2-rr3j.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N"}]}