Page History

...

Failure to remove temporary files before termination can result in information leakage and resource exhaustion.

Rule	Severity	Likelihood

Remediation Cost

Detectable	Repairable	Priority	Level
FIO03-J	Medium	Probable

Medium

No

P8

P4

L2

L3

Automated Detection

Tool	Version	Checker	Description
Parasoft Jtest

9.5SECURITY.IBA.ATFImplemented

Include Page

	Parasoft_V
	Parasoft_V

CERT.FIO03.ATF
CERT.FIO03.REMTMP

Avoid temporary files
Remove temporary files before termination

SEI CERT C Coding Standard	FIO21-C. Do not create temporary files in shared directories
SEI CERT C++ Coding Standard	VOID FIO19-CPP. Do not create temporary files in shared directories
MITRE CWE	CWE-377, Insecure Temporary File CWE-459, Incomplete Cleanup

[API 2014]	`Class File` Method `createTempFile` Method `delete` Method `deleteOnExit`
[Darwin 2004]	Section 11.5, "Creating a Transient File"
[J2SE 2011]

...