Skip to content
Not rated

CVE-2021-28100 Priam uses File.createTempFile, which gives the permissions on that file -rw-r--r--

Description

Priam uses File.createTempFile, which gives the permissions on that file -rw-r--r--. An attacker with read access to the local filesystem can read anything written there by the Priam process.

Affected products and versions

Product Affected versions Fixed in
Netflix OSS Priam Versions not published
Track this CVE