cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified impact via a symlink attack on a cache file with a predictable name in /tmp/suds/.
CVSS 2.0
Severity: LOW
Problem Type: CWE-59,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| opensuse | opensuse | 12.3 |
| redhat | enterprise_linux | 6.0 |
| redhat | enterprise_linux | 5 |
| opensuse | opensuse | 12.2 |
| jeff_ortel | suds | 0.4 |