CVE ID:	CVE-2019-3881
Description:	Bundler prior to 2.1.0 uses a predictable path in /tmp/, created with insecure permissions as a storage location for gems, if locations under the user's home directory are not available. If Bundler is used in a scenario where the user does not have a writable home directory, an attacker could place malicious code in this directory that would be later loaded and executed.
Test IDs:	1.3.6.1.4.1.25623.1.1.4.2020.1582.2   1.3.6.1.4.1.25623.1.0.853209   1.3.6.1.4.1.25623.1.0.853228   1.3.6.1.4.1.25623.1.1.4.2020.1582.1   1.3.6.1.4.1.25623.1.1.12.2021.4870.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2019-3881 https://bugzilla.redhat.com/show_bug.cgi?id=1651826 https://bugzilla.redhat.com/show_bug.cgi?id=1651826