NetSight
IP …
medium5.9

CVE-2022-24302

In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

Impact

In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

Affected products

VendorProductAffected versions
ParamikoParamiko
before 2.10.1
DebianDebian Linux
Versions 9.0, 10.0
FedoraprojectFedora
Versions 34, 35, 36

Weakness classification

CWE-362

References