๐ CVE-2022-23950 | Keylime up to 6.2.x Unix Domain Socket /tmp temp file (GHSA-9r9r-f8xc-m875)
๐ก Newskategorie: Sicherheitslรผcken
๐ Quelle: vuldb.com
A vulnerability, which was classified as problematic, was found in Keylime up to 6.2.x. Affected is an unknown function of the file /tmp of the component Unix Domain Socket Handler. The manipulation leads to creation of temporary file in directory with insecure permissions. This vulnerability is traded as CVE-2022-23950. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component. ...