The product creates a temporary file in a directory whose permissions allow unintended actors to determine the file's existence or otherwise access that file.
Many contemporary languages have functions which properly handle this condition. Older C temp file functions are especially susceptible.
Try to store sensitive tempfiles in a directory which is not world readable -- i.e., per-user directories.
Avoid using vulnerable temp file functions.
Our security experts can help you identify and remediate CWE-379 vulnerabilities in your codebase.
Get Security Assessment