CVE Vulnerabilities

CVE-2013-4253

Insecure Temporary File

Published: Oct 19, 2022 | Modified: Nov 21, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

The deployment script in the unsupported OpenShift Extras set of add-on scripts, in Red Hat Openshift 1, installs a default public key in the root users authorized_keys file.

Weakness

Creating and using insecure temporary files can leave application and system data vulnerable to attack.

Affected Software

Name Vendor Start Version End Version
Openshift Redhat 1.0 (including) 1.0 (including)

References