Eclipse Jersey 3.0.0 Release Candidate 1

CPE Details

Eclipse Jersey 3.0.0 Release Candidate 1
eclipse
jersey
3.0.0
2021-04-26
14h29 +00:00
2021-04-26
15h32 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:eclipse:jersey:3.0.0:rc1:*:*:*:*:*:*

Informations

Vendor

eclipse

Product

jersey

Version

3.0.0

Update

rc1

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2021-28168 2021-04-22 15h35 +00:00 Eclipse Jersey 2.28 to 2.33 and Eclipse Jersey 3.0.0 to 3.0.1 contains a local information disclosure vulnerability. This is due to the use of the File.createTempFile which creates a file inside of the system temporary directory with the permissions: -rw-r--r--. Thus the contents of this file are viewable by all other users locally on the system. As such, if the contents written is security sensitive, it can be disclosed to other local users.
6.2
Medium