In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Resteasy |
Redhat |
* |
* |
References