CVE-2021-44512

Name of the Vulnerable Software and Affected Versions: tmate-ssh-server version 2.3.0

Description: The issue is related to world-writable permissions on the /tmp/tmate/sessions directory, allowing a local attacker to compromise session handling integrity or obtain a read-write session ID from a read-only session symlink in this directory.

Recommendations: For tmate-ssh-server version 2.3.0, consider changing the permissions of the /tmp/tmate/sessions directory to prevent world-writable access as a temporary workaround until a patch is available. Restrict access to this directory to minimize the risk of exploitation.