In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
07 Nov 2023, 03:44
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2022-03-17 22:15
Updated : 2024-02-28 19:09
NVD link : CVE-2022-24302
Mitre link : CVE-2022-24302
CVE.ORG link : CVE-2022-24302
JSON object : View
Products Affected
fedoraproject
- fedora
debian
- debian_linux
paramiko
- paramiko
CWE
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')