CVE-2021-44512

World-writable permissions on the /tmp/tmate/sessions directory in tmate-ssh-server 2.3.0 allow a local attacker to compromise the integrity of session…

published December 7, 2021

CVSS
—
EPSS
0%
Percentile
17.0
In the wild
Unconfirmed
What it is

World-writable permissions on the /tmp/tmate/sessions directory in tmate-ssh-server 2.3.0 allow a local attacker to compromise the integrity of session handling, or obtain the read-write session ID from a read-only session symlink in this directory.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00262 · 17.0th percentile
Published
2021-12-07T02:07Z
EPSS history
Timeline
  • 07 DEC 02:07Z
    World-writable permissions on the /tmp/tmate/sessions directory in tmate-ssh-server 2.3.0 allow a local attacker to compromise the integrity of session…
    cvelistv5