Threats affecting pkg:nuget/SteeltoeOSS/steeltoe.configuration.abstractions

Steeltoe.Configuration.Abstractions versions 4.0.0 through 4.1.0 improperly store TLS client credentials from MySQL or PostgreSQL service bindings in world-readable temporary files on Linux systems. These files are created with permissions that allow other users to read sensitive key material and are not deleted after use. Version 4.2.0 addresses this issue by patching the insecure file handling. The vulnerability has a medium severity rating with a CVSS score of 4.7.