CVE-2017-1000383

It was found that emacs applies the opened file read permissions to the swap file, overriding the process' umask. An attacker might search for vim swap files, that were not deleted properly, in order to retrieve sensible data.

This flaw is an incorrect permission assignment, where the application ignores the user's umask setting when creating a backup file (e.g., filename~).This behavior is triggered during normal file-saving operations. On a multi-user system, this could allow an unprivileged local user to read the contents of backup files created by other users. This results in a low-impact information disclosure of the file's previous contents, the practical impact is limited to these specific shared-environment scenarios and does not allow an attacker to modify data or execute code.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.