Steeltoe TLS Private Key Disclosure via Insecure /tmp Permissions (CVE-2025-2627)

Vulnerability Overview Vulnerability Name: TLS private keys written to /tmp with default permissions, never deleted Severity: Moderate (4.7 / 10) Description: When the MySQL or PostgreSQL service is bound to VCAP_SERVICES, the Connectors library writes TLS client credentials to temporary files (using ) with permissions 0644 (world-readable), and these files are never deleted. The same key material is protected in with permissions 0649. Scope of Impact Affected Versions: Steeltoe.Configuration.Abstractions (.NET) >= 4.0.0, <= 4.1.0 Fixed Version: 4.2.0 Impact Configuration: - Applications deployed on Cloud Foundry or other environments where VCAP_SERVICES includes a MySQL or PostgreSQL service binding with sslKey credentials. - Processes running under different UIDs can read the TLS client private key in the container and use it to impersonate the application when connecting to the backend database. Remediation Direct Fix: Upgrade to Steeltoe.Configuration.Abstractions (.NET) 4.2.0 or higher. Temporary Mitigation: If an immediate upgrade is not possible, prevent processes running under different UIDs from executing within the container, and restrict access to . POC Code or Exploit Code No specific POC code or exploit code is provided in the page. Additional Information CVE ID: CVE-2025-2627 Weaknesses: CWE-312, CWE-732 CVSS v3 Base Metrics: - Attack Vector: Local - Attack Complexity: High - Privileges Required: Low - User Interaction: Unchanged - Scope: Unchanged - Confidentiality: High - Integrity: None - Availability: None Summary This vulnerability involves insecure storage and permission settings for TLS private keys, which may lead to the leakage of sensitive information. It is recommended to upgrade to the fixed version as soon as possible or implement temporary mitigation measures.

Goal Reached Thanks to every supporter — we hit 100%!

Steeltoe TLS Private Key Disclosure via Insecure /tmp Permissions (CVE-2025-2627)

More from this source