CVE-2026-79899

7.9 Élevée

Publiée le 01/10/2026 à 17:17 · Modifiée le 01/10/2026 à 22:34 · En attente d'analyse NVD · Source : df4dee71-de3a-4139-9588-11b62fe6c0ff

Description

Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting a restrictive umask. A local user on the BoKS Master who can read files under BOKS_tmp may be able to obtain CA secret or host private-key material while the utility runs, or obtain CA secret material left behind after successful certificate creation.

Traduire en français

Produits concernés

Fortra BoKS Manager

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.9 Élevée	df4dee71-de3a-4139-9588-11b62fe6c0ff	`CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N`

Faiblesses (CWE)

CWE-377

Références

https://www.fortra.com/security/advisories/product-security/fi-2026-014

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories