description: In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user.
problem types: CWE-378
affected:
{
vendor: n/a
product: RESTEasy
versions:
version: Fixed in RESTEasy 4.7.8.Final, status: affected
}