VULNERABILITY INTELLIGENCE

CVE-2023-23558

CVSS score6.3 MEDIUM

EPSS probability0.31%

CISA KEVNot currently listed

Published2023-02-16

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Description

In Eternal Terminal 6.2.1, TelemetryService uses fixed paths in /tmp. For example, a local attacker can create /tmp/.sentry-native-etserver with mode 0777 before the etserver process is started. The attacker can choose to read sensitive information from that file, or modify the information in that file.

Weakness classification

nvd@nist.gov: CWE-59
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-59

Primary references

cve@mitre.org — Mailing List, Patch, Third Party Advisory
cve@mitre.org — Exploit, Issue Tracking, Third Party Advisory
cve@mitre.org — Product
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Product