Vulnerability Details CVE-2022-21126
The package com.github.samtools:htsjdk before 3.0.1 are vulnerable to Creation of Temporary File in Directory with Insecure Permissions due to the createTempDir() function in util/IOUtil.java not checking for the existence of the temporary directory before attempting to create it.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 14.9%
CVSS Severity
CVSS v3 Score 7.3
References
- https://github.com/samtools/htsjdk/commit/4a4024a97ee3e87096df6ad9b22c8260bd527772
- https://github.com/samtools/htsjdk/pull/1617
- https://security.snyk.io/vuln/SNYK-JAVA-COMGITHUBSAMTOOLS-3149901
- https://github.com/samtools/htsjdk/commit/4a4024a97ee3e87096df6ad9b22c8260bd527772
- https://github.com/samtools/htsjdk/pull/1617
- https://security.snyk.io/vuln/SNYK-JAVA-COMGITHUBSAMTOOLS-3149901
Products affected by CVE-2022-21126
-
cpe:2.3:a:samtools:htsjdk:-
-
cpe:2.3:a:samtools:htsjdk:1.113
-
cpe:2.3:a:samtools:htsjdk:1.114
-
cpe:2.3:a:samtools:htsjdk:1.115
-
cpe:2.3:a:samtools:htsjdk:1.116
-
cpe:2.3:a:samtools:htsjdk:1.117
-
cpe:2.3:a:samtools:htsjdk:1.118
-
cpe:2.3:a:samtools:htsjdk:1.119
-
cpe:2.3:a:samtools:htsjdk:1.120
-
cpe:2.3:a:samtools:htsjdk:1.121
-
cpe:2.3:a:samtools:htsjdk:1.122
-
cpe:2.3:a:samtools:htsjdk:1.123
-
cpe:2.3:a:samtools:htsjdk:1.124
-
cpe:2.3:a:samtools:htsjdk:1.125
-
cpe:2.3:a:samtools:htsjdk:1.126
-
cpe:2.3:a:samtools:htsjdk:1.127
-
cpe:2.3:a:samtools:htsjdk:1.128
-
cpe:2.3:a:samtools:htsjdk:1.129
-
cpe:2.3:a:samtools:htsjdk:1.130
-
cpe:2.3:a:samtools:htsjdk:1.131
-
cpe:2.3:a:samtools:htsjdk:1.133
-
cpe:2.3:a:samtools:htsjdk:1.134
-
cpe:2.3:a:samtools:htsjdk:1.135
-
cpe:2.3:a:samtools:htsjdk:1.136
-
cpe:2.3:a:samtools:htsjdk:1.137
-
cpe:2.3:a:samtools:htsjdk:1.138
-
cpe:2.3:a:samtools:htsjdk:1.139
-
cpe:2.3:a:samtools:htsjdk:1.140
-
cpe:2.3:a:samtools:htsjdk:1.141
-
cpe:2.3:a:samtools:htsjdk:1.142
-
cpe:2.3:a:samtools:htsjdk:2.0.0
-
cpe:2.3:a:samtools:htsjdk:2.0.1
-
cpe:2.3:a:samtools:htsjdk:2.1.0
-
cpe:2.3:a:samtools:htsjdk:2.1.1
-
cpe:2.3:a:samtools:htsjdk:2.10.0
-
cpe:2.3:a:samtools:htsjdk:2.10.1
-
cpe:2.3:a:samtools:htsjdk:2.11.0
-
cpe:2.3:a:samtools:htsjdk:2.12.0
-
cpe:2.3:a:samtools:htsjdk:2.13.0
-
cpe:2.3:a:samtools:htsjdk:2.13.1
-
cpe:2.3:a:samtools:htsjdk:2.13.2
-
cpe:2.3:a:samtools:htsjdk:2.14.0
-
cpe:2.3:a:samtools:htsjdk:2.14.1
-
cpe:2.3:a:samtools:htsjdk:2.14.2
-
cpe:2.3:a:samtools:htsjdk:2.14.3
-
cpe:2.3:a:samtools:htsjdk:2.15.0
-
cpe:2.3:a:samtools:htsjdk:2.15.1
-
cpe:2.3:a:samtools:htsjdk:2.16.0
-
cpe:2.3:a:samtools:htsjdk:2.16.1
-
cpe:2.3:a:samtools:htsjdk:2.17.0
-
cpe:2.3:a:samtools:htsjdk:2.18.0
-
cpe:2.3:a:samtools:htsjdk:2.18.1
-
cpe:2.3:a:samtools:htsjdk:2.18.2
-
cpe:2.3:a:samtools:htsjdk:2.19.0
-
cpe:2.3:a:samtools:htsjdk:2.2.0
-
cpe:2.3:a:samtools:htsjdk:2.2.1
-
cpe:2.3:a:samtools:htsjdk:2.2.2
-
cpe:2.3:a:samtools:htsjdk:2.2.3
-
cpe:2.3:a:samtools:htsjdk:2.2.4
-
cpe:2.3:a:samtools:htsjdk:2.20.0
-
cpe:2.3:a:samtools:htsjdk:2.20.1
-
cpe:2.3:a:samtools:htsjdk:2.20.2
-
cpe:2.3:a:samtools:htsjdk:2.20.3
-
cpe:2.3:a:samtools:htsjdk:2.21.0
-
cpe:2.3:a:samtools:htsjdk:2.21.1
-
cpe:2.3:a:samtools:htsjdk:2.21.2
-
cpe:2.3:a:samtools:htsjdk:2.21.3
-
cpe:2.3:a:samtools:htsjdk:2.22.0
-
cpe:2.3:a:samtools:htsjdk:2.23.0
-
cpe:2.3:a:samtools:htsjdk:2.24.0
-
cpe:2.3:a:samtools:htsjdk:2.24.1
-
cpe:2.3:a:samtools:htsjdk:2.3.0
-
cpe:2.3:a:samtools:htsjdk:2.4.0
-
cpe:2.3:a:samtools:htsjdk:2.4.1
-
cpe:2.3:a:samtools:htsjdk:2.5.0
-
cpe:2.3:a:samtools:htsjdk:2.5.1
-
cpe:2.3:a:samtools:htsjdk:2.6.0
-
cpe:2.3:a:samtools:htsjdk:2.6.1
-
cpe:2.3:a:samtools:htsjdk:2.7.0
-
cpe:2.3:a:samtools:htsjdk:2.8.0
-
cpe:2.3:a:samtools:htsjdk:2.8.1
-
cpe:2.3:a:samtools:htsjdk:2.9.0
-
cpe:2.3:a:samtools:htsjdk:2.9.1
-
cpe:2.3:a:samtools:htsjdk:3.0.0