high7.8
CVE-2016-7490
The installation script studioexpressinstall for Teradata Studio Express 15.12.00.00 creates files in /tmp insecurely.
Impact
The installation script studioexpressinstall for Teradata Studio Express 15.12.00.00 creates files in /tmp insecurely. A malicious local user could create a symlink in /tmp and possibly clobber system files or perhaps elevate privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Teradata | Studio Express | Version 15.12.00.00 |