Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2023-5936

Unsafe temporary data privileges on Unix systems in Arc before v1.6.0

Description

On Unix systems (Linux, MacOS), Arc uses a temporary file with unsafe privileges. By tampering with such file, a malicious local user in the system may be able to trigger arbitrary code execution with root privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Nozomi Networks Arc

Default version status: unaffected

  • 0 to < 1.6.0affected

References