5.5
Medium
CVE-2021-22571 A local attacker could read files from some other users' SA360 reports stored in the /tmp folder during staging…
Description
A local attacker could read files from some other users' SA360 reports stored in the /tmp folder during staging process before the files are loaded in BigQuery. We recommend upgrading to version 1.0.3 or above.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| google/sa360-webquery-bigquery 1.0 | earliest → 1.0.2 | No fix stated |