CVE-2022-3952

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-3952
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-3952.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-3952
Aliases
Published
2022-11-11T00:00:00Z
Modified
2026-07-15T02:06:17.062077778Z
Severity
  • 2.6 (Low) CVSS_V3 - CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
ManyDesigns Portofino WarFileLauncher.java createTempDir temp file
Details

A vulnerability has been found in ManyDesigns Portofino 5.3.2 and classified as problematic. Affected by this vulnerability is the function createTempDir of the file WarFileLauncher.java. The manipulation leads to creation of temporary file in directory with insecure permissions. Upgrading to version 5.3.3 is able to address this issue. The name of the patch is 94653cb357806c9cf24d8d294e6afea33f8f0775. It is recommended to upgrade the affected component. The identifier VDB-213457 was assigned to this vulnerability.

Database specific 
{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-377"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/3xxx/CVE-2022-3952.json"
}
References

Affected packages

Git / github.com/manydesigns/portofino

Affected ranges

Type
GIT
Repo
https://github.com/manydesigns/portofino
Events
Introduced
50c9f69b3c5bfd1edb1a859d3ace74f68529368e
Fixed
94653cb357806c9cf24d8d294e6afea33f8f0775
Fixed
a42e1e922b4fdc1864324f68ebf078be87f2d9e5
Database specific 
{
    "cpe": "cpe:2.3:a:manydesigns:portofino:5.3.2:*:*:*:*:*:*:*",
    "source": [
        "CPE_STRING",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "5.3.2"
        },
        {
            "last_affected": "5.3.2"
        }
    ]
}

Affected versions

5.*
5.3.2
v5.*
v5.3.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-3952.json"