PT-2022-9255
CVE-2021-22571
·
Published
2022-03-18
·
Updated
2022-05-10
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
SA360 versions prior to 1.0.3
Description
A local attacker could read files from some other users' SA360 reports stored in the /tmp folder during the staging process before the files are loaded in BigQuery.
Recommendations
For versions prior to 1.0.3, upgrade to version 1.0.3 or above.
Found an issue in the description? Have something to add? Feel free to write us 👾