Moderate severityNVD Advisory· Published Mar 23, 2021· Updated Aug 3, 2024

CVE-2021-28100

Description

Priam uses File.createTempFile, which gives the permissions on that file -rw-r--r--. An attacker with read access to the local filesystem can read anything written there by the Priam process.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
com.netflix.priam:priamMaven	<= 3.1.104	—

Affected products

Priam/Priamdescription
ghsa-coords
pkg:maven/com.netflix.priam/priam
Range: <= 3.1.104

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-f4jh-ww96-9h9jghsaADVISORY
github.com/JLLeitschuh/security-research/security/advisories/GHSA-f4jh-ww96-9h9jghsaWEB
github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2021-002.mdmitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000