Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2021-22571

Information Leak in SA360-webquery-bigquery through read on /tmp

Description

A local attacker could read files from some other users' SA360 reports stored in the /tmp folder during staging process before the files are loaded in BigQuery. We recommend upgrading to version 1.0.3 or above.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Google LLC google/sa360-webquery-bigquery

  • unspecified to ≤ 1.0.2affected

References