CVE-2017-8418
LOW 3.3EPSS 0.4%
RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users.
- CVSS v3.0
- 3.3 LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - CVSS v3.0
- 3.3 LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - CVSS v2.0
- 2.1 LOW
AV:L/AC:L/Au:N/C:N/I:P/A:N - EPSS
- 0.41% chance of exploitation in the next 30 days, 34th percentile
- Published
- 2017-05-02
- Updated
- 2024-09-16