CVEvulnerability

CVE-2020-11867

3.3 LOW Published 2020-11-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-11-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.3 LOW — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-276

Description

Audacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default. After Audacity creates the temporary directory, it sets its permissions to 755. Any user on the system can read and play the temporary audio .au files located there.

Affected configurations

• audacityteam audacity (<= 2.3.3) • fedoraproject fedora 33 • fedoraproject fedora 34

Related

Weakness · CWE (1)

  • CWE-276 Incorrect Default Permissions weakness

References