Skip to content

Changes

Summary

  1. Use Files.createTempFile() in DefaultTrustListManagerTest (commit: c662757) (details)
Commit c66275786686c0c5308b11048153f397a739e36b by noreply
Use Files.createTempFile() in DefaultTrustListManagerTest

This fixes temporary file information disclosure vulnerability due to the use
of the vulnerable `File.createTempFile()` method. The vulnerability is fixed by
using the `Files.createTempFile()` method which sets the correct posix permissions.

Co-authored-by: Moderne <team@moderne.io>
Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
(commit: c662757)
The file was modified opc-ua-stack/stack-core/src/test/java/org/eclipse/milo/opcua/stack/core/security/DefaultTrustListManagerTest.java (diff)