Vulnerabilities > CVE-2017-8418 - Exposure of Resource to Wrong Sphere vulnerability in Rubocop Project Rubocop

CVSS 2.1 - LOW

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

local

low complexity

rubocop-project

CWE-668

NVD

Published: 2017-05-02

Updated: 2019-10-03

Summary

RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users.

Vulnerable Configurations

Part	Description	Count
Application	Rubocop_Project Rubocop Project Rubocop 0.0.0 Rubocop Project Rubocop 0.1.0 Rubocop Project Rubocop 0.2.0 Rubocop Project Rubocop 0.2.1 Rubocop Project Rubocop 0.3.0 Rubocop Project Rubocop 0.3.1 Rubocop Project Rubocop 0.3.2 Rubocop Project Rubocop 0.4.0 Rubocop Project Rubocop 0.4.1 Rubocop Project Rubocop 0.4.2 Rubocop Project Rubocop 0.4.3 Rubocop Project Rubocop 0.4.4 Rubocop Project Rubocop 0.4.5 Rubocop Project Rubocop 0.4.6 Rubocop Project Rubocop 0.5.0 Rubocop Project Rubocop 0.6.0 Rubocop Project Rubocop 0.6.1 Rubocop Project Rubocop 0.7.0 Rubocop Project Rubocop 0.7.1 Rubocop Project Rubocop 0.7.2 Rubocop Project Rubocop 0.8.0 Rubocop Project Rubocop 0.8.1 Rubocop Project Rubocop 0.8.2 Rubocop Project Rubocop 0.8.3 Rubocop Project Rubocop 0.9.0 Rubocop Project Rubocop 0.9.1 Rubocop Project Rubocop 0.11.0 Rubocop Project Rubocop 0.11.1 Rubocop Project Rubocop 0.12.0 Rubocop Project Rubocop 0.13.0 Rubocop Project Rubocop 0.13.1 Rubocop Project Rubocop 0.14.0 Rubocop Project Rubocop 0.14.1 Rubocop Project Rubocop 0.15.0 Rubocop Project Rubocop 0.16.0 Rubocop Project Rubocop 0.17.0 Rubocop Project Rubocop 0.18.0 Rubocop Project Rubocop 0.18.1 Rubocop Project Rubocop 0.19.0 Rubocop Project Rubocop 0.19.1 Rubocop Project Rubocop 0.20.0 Rubocop Project Rubocop 0.20.1 Rubocop Project Rubocop 0.21.0 Rubocop Project Rubocop 0.22.0 Rubocop Project Rubocop 0.23.0 Rubocop Project Rubocop 0.24.0 Rubocop Project Rubocop 0.24.1 Rubocop Project Rubocop 0.25.0 Rubocop Project Rubocop 0.26.0 Rubocop Project Rubocop 0.26.1 Rubocop Project Rubocop 0.27.0 Rubocop Project Rubocop 0.27.1 Rubocop Project Rubocop 0.28.0 Rubocop Project Rubocop 0.29.0 Rubocop Project Rubocop 0.29.1 Rubocop Project Rubocop 0.30.0 Rubocop Project Rubocop 0.30.1 Rubocop Project Rubocop 0.31.0 Rubocop Project Rubocop 0.32.0 Rubocop Project Rubocop 0.32.1 Rubocop Project Rubocop 0.33.0 Rubocop Project Rubocop 0.34.0 Rubocop Project Rubocop 0.34.1 Rubocop Project Rubocop 0.34.2 Rubocop Project Rubocop 0.35.0 Rubocop Project Rubocop 0.35.1 Rubocop Project Rubocop 0.36.0 Rubocop Project Rubocop 0.37.0 Rubocop Project Rubocop 0.37.1 Rubocop Project Rubocop 0.37.2 Rubocop Project Rubocop 0.38.0 Rubocop Project Rubocop 0.39.0 Rubocop Project Rubocop 0.40.0 Rubocop Project Rubocop 0.41.0 Rubocop Project Rubocop 0.41.1 Rubocop Project Rubocop 0.41.2 Rubocop Project Rubocop 0.42.0 Rubocop Project Rubocop 0.43.0 Rubocop Project Rubocop 0.44.0 Rubocop Project Rubocop 0.44.1 Rubocop Project Rubocop 0.45.0 Rubocop Project Rubocop 0.46.0 Rubocop Project Rubocop 0.47.0 Rubocop Project Rubocop 0.47.1 Rubocop Project Rubocop 0.48.0 Rubocop Project Rubocop 0.48.1	86

Common Weakness Enumeration (CWE)

CWE-668 - Exposure of Resource to Wrong Sphere

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References