{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-118990", "assignerOrgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "state": "PUBLISHED", "assignerShortName": "CPANSec", "dateReserved": "2026-10-29T10:58:47.285Z", "datePublished": "2026-10-30T13:12:29.396Z", "dateUpdated": "2026-10-30T13:12:29.396Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://cpan.org/modules", "defaultStatus": "unaffected", "modules": ["CallBackery"], "packageName": "CallBackery", "packageURL": "pkg:cpan/CallBackery", "programFiles": ["lib/CallBackery/Config.pm"], "programRoutines": [{"name": "CallBackery::Config::getConfigBlob"}], "repo": "https://github.com/oetiker/callbackery", "versions": [{"lessThan": "0.62.0", "status": "affected", "version": "0", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup.\n\ngetConfigBlob() has the sqlite3 shell write the dump to /tmp/cbdump<pid> and never removes it. The file takes the process umask, and a symlink planted at that predictable name is followed.\n\nThe dump holds every user's password hash and every value saved by the application's forms. A local user can read these after any backup, and may redirect the dump to a file of their choosing."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-379", "description": "CWE-379 Creation of Temporary File in Directory with Insecure Permissions", "lang": "en", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-59", "description": "CWE-59 Improper Link Resolution Before File Access", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "shortName": "CPANSec", "dateUpdated": "2026-10-30T13:12:29.396Z"}, "references": [{"tags": ["release-notes"], "url": "https://metacpan.org/release/OETIKER/CallBackery-0.62.0/changes"}], "solutions": [{"lang": "en", "value": "Upgrade to CallBackery 0.62.0 or later, and delete any leftover /tmp/cbdump* files."}], "source": {"discovery": "UNKNOWN"}, "title": "CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup", "x_generator": {"engine": "cpansec-cna-tool 0.1"}}}}

{}

{"affected": [{"affectedData": [{"collectionURL": "https://cpan.org/modules", "defaultStatus": "unaffected", "modules": ["CallBackery"], "packageName": "CallBackery", "packageURL": "pkg:cpan/CallBackery", "programFiles": ["lib/CallBackery/Config.pm"], "programRoutines": [{"name": "CallBackery::Config::getConfigBlob"}], "repo": "https://github.com/oetiker/callbackery", "versions": [{"lessThan": "0.62.0", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup.\n\ngetConfigBlob() has the sqlite3 shell write the dump to /tmp/cbdump<pid> and never removes it. The file takes the process umask, and a symlink planted at that predictable name is followed.\n\nThe dump holds every user's password hash and every value saved by the application's forms. A local user can read these after any backup, and may redirect the dump to a file of their choosing."}], "id": "CVE-2026-118990", "lastModified": "2026-10-30T13:18:31.763", "metrics": {}, "published": "2026-10-30T13:18:31.763", "references": [{"source": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "url": "https://metacpan.org/release/OETIKER/CallBackery-0.62.0/changes"}], "sourceIdentifier": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-59"}, {"lang": "en", "value": "CWE-379"}], "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "type": "Secondary"}]}

{}

{}