Vulnerabilities > CVE-2022-21126 - Exposure of Resource to Wrong Sphere vulnerability in Samtools Htsjdk

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

samtools

CWE-668

NVD

Published: 2022-11-29

Updated: 2022-12-01

Summary

The package com.github.samtools:htsjdk before 3.0.1 are vulnerable to Creation of Temporary File in Directory with Insecure Permissions due to the createTempDir() function in util/IOUtil.java not checking for the existence of the temporary directory before attempting to create it.

Vulnerable Configurations

Part	Description	Count
Application	Samtools Samtools Htsjdk - Samtools Htsjdk 1.113 Samtools Htsjdk 1.114 Samtools Htsjdk 1.115 Samtools Htsjdk 1.116 Samtools Htsjdk 1.117 Samtools Htsjdk 1.118 Samtools Htsjdk 1.119 Samtools Htsjdk 1.120 Samtools Htsjdk 1.121 Samtools Htsjdk 1.122 Samtools Htsjdk 1.123 Samtools Htsjdk 1.124 Samtools Htsjdk 1.125 Samtools Htsjdk 1.126 Samtools Htsjdk 1.127 Samtools Htsjdk 1.128 Samtools Htsjdk 1.129 Samtools Htsjdk 1.130 Samtools Htsjdk 1.131 Samtools Htsjdk 1.133 Samtools Htsjdk 1.134 Samtools Htsjdk 1.135 Samtools Htsjdk 1.136 Samtools Htsjdk 1.137 Samtools Htsjdk 1.138 Samtools Htsjdk 1.139 Samtools Htsjdk 1.140 Samtools Htsjdk 1.141 Samtools Htsjdk 1.142 Samtools Htsjdk 2.0.0 Samtools Htsjdk 2.0.1 Samtools Htsjdk 2.1.0 Samtools Htsjdk 2.1.1 Samtools Htsjdk 2.2.0 Samtools Htsjdk 2.2.1 Samtools Htsjdk 2.2.2 Samtools Htsjdk 2.2.3 Samtools Htsjdk 2.2.4 Samtools Htsjdk 2.3.0 Samtools Htsjdk 2.4.0 Samtools Htsjdk 2.4.1 Samtools Htsjdk 2.5.0 Samtools Htsjdk 2.5.1 Samtools Htsjdk 2.6.0 Samtools Htsjdk 2.6.1 Samtools Htsjdk 2.7.0 Samtools Htsjdk 2.8.0 Samtools Htsjdk 2.8.1 Samtools Htsjdk 2.9.0 Samtools Htsjdk 2.9.1 Samtools Htsjdk 2.10.0 Samtools Htsjdk 2.10.1 Samtools Htsjdk 2.11.0 Samtools Htsjdk 2.12.0 Samtools Htsjdk 2.13.0 Samtools Htsjdk 2.13.1 Samtools Htsjdk 2.13.2 Samtools Htsjdk 2.14.0 Samtools Htsjdk 2.14.1 Samtools Htsjdk 2.14.2 Samtools Htsjdk 2.14.3 Samtools Htsjdk 2.15.0 Samtools Htsjdk 2.15.1 Samtools Htsjdk 2.16.0 Samtools Htsjdk 2.16.1 Samtools Htsjdk 2.17.0 Samtools Htsjdk 2.18.0 Samtools Htsjdk 2.18.1 Samtools Htsjdk 2.18.2 Samtools Htsjdk 2.19.0 Samtools Htsjdk 2.20.0 Samtools Htsjdk 2.20.1 Samtools Htsjdk 2.20.2 Samtools Htsjdk 2.20.3 Samtools Htsjdk 2.21.0 Samtools Htsjdk 2.21.1 Samtools Htsjdk 2.21.2 Samtools Htsjdk 2.21.3 Samtools Htsjdk 2.22.0 Samtools Htsjdk 2.23.0 Samtools Htsjdk 2.24.0 Samtools Htsjdk 2.24.1 Samtools Htsjdk 3.0.0	84

Common Weakness Enumeration (CWE)

CWE-668 - Exposure of Resource to Wrong Sphere

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References