CVE-2023-5936CWE-732

Unsafe temporary data privileges on Unix systems in Arc before v1.6.0

High · published May 15, 2024

CVSS v4.0
7.3
EPSS
0%
Percentile
3.6
In the wild
Unconfirmed
What it is

On Unix systems (Linux, MacOS), Arc uses a temporary file with unsafe privileges.

By tampering with such file, a malicious local user in the system may be able to trigger arbitrary code execution with root privileges.

The record
Technical detail
CVSS v4.0
7.3 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00147 · 3.6th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2024-05-15T16:04Z
EPSS history
Timeline
  • 15 MAY 16:04Z
    Unsafe temporary data privileges on Unix systems in Arc before v1.6.0
    cvelistv5