CVSS 7.5 · High EPSS 8,0%
Kerentanan Creation of Temporary File in Directory with Insecure Permissions pada apache ant, gradle +31 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.
As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the effort. This would still allow an attacker to inject modified source files into the build process.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| apache | ant | Versi 1.10.8 |
| gradle | gradle | Semua versi sebelum 6.8.0 |
| fedoraproject | fedora | Versi 31 |
| fedoraproject | fedora | Versi 32 |
| fedoraproject | fedora | Versi 33 |
| oracle | agile engineering data management | Versi 6.2.1.0 |
| oracle | api gateway | Versi 11.1.2.4.0 |
| oracle | banking platform | Versi 2.4.0 |
| oracle | banking platform | Versi 2.4.1 |
| oracle | banking platform | Versi 2.6.2 |
| oracle | banking platform | Versi 2.7.0 |
| oracle | banking platform | Versi 2.7.1 |
| oracle | banking platform | Versi 2.8.0 |
| oracle | banking treasury management | Versi 14.4 |
| oracle | communications unified inventory management | Versi 7.4.0 |
| oracle | communications unified inventory management | Versi 7.4.1 |
| oracle | data integrator | Versi 12.2.1.3.0 |
| oracle | data integrator | Versi 12.2.1.4.0 |
| oracle | endeca information discovery studio | Versi 3.2.0.0 |
| oracle | enterprise repository | Versi 11.1.1.7.0 |
| oracle | financial services analytical applications infrastructure | Versi 8.0.6 hingga 8.0.9 |
| oracle | financial services analytical applications infrastructure | Versi 8.1.0 |
| oracle | financial services analytical applications infrastructure | Versi 8.1.1 |
| oracle | flexcube private banking | Versi 12.0.0 |
| oracle | flexcube private banking | Versi 12.1.0 |
| oracle | primavera gateway | Versi 16.2.0 hingga 16.2.11 |
| oracle | primavera gateway | Versi 17.12.0 hingga 17.12.9 |
| oracle | primavera unifier | Versi 17.7 hingga 17.12 |
| oracle | primavera unifier | Versi 16.1 |
| oracle | primavera unifier | Versi 16.2 |
| oracle | primavera unifier | Versi 18.8 |
| oracle | primavera unifier | Versi 19.12 |
| oracle | primavera unifier | Versi 20.12 |
| oracle | real-time decision server | Versi 3.2.0.0 |
| oracle | real-time decision server | Versi 11.1.1.9.0 |
| oracle | retail advanced inventory planning | Versi 14.1 |
| oracle | retail assortment planning | Versi 16.0.3 |
| oracle | retail category management planning & optimization | Versi 16.0.3 |
| oracle | retail eftlink | Versi 19.0.1 |
| oracle | retail eftlink | Versi 20.0.0 |
| oracle | retail financial integration | Versi 14.1.3 |
| oracle | retail financial integration | Versi 15.0.3 |
| oracle | retail financial integration | Versi 16.0.3 |
| oracle | retail integration bus | Versi 15.0.3 |
| oracle | retail item planning | Versi 16.0.3 |
| oracle | retail macro space optimization | Versi 16.0.3 |
| oracle | retail merchandise financial planning | Versi 16.0.3 |
| oracle | retail merchandising system | Versi 14.1.3.2 |
| oracle | retail merchandising system | Versi 16.0.3 |
| oracle | retail predictive application server | Versi 14.1 |
| oracle | retail regular price optimization | Versi 16.0.3 |
| oracle | retail replenishment optimization | Versi 16.0.3 |
| oracle | retail service backbone | Versi 14.1.3 |
| oracle | retail service backbone | Versi 15.0.3 |
| oracle | retail service backbone | Versi 16.0.3 |
| oracle | retail size profile optimization | Versi 16.0.3 |
| oracle | retail store inventory management | Versi 14.1.3.9 |
| oracle | retail store inventory management | Versi 15.0.3.0 |
| oracle | retail store inventory management | Versi 16.0.3.0 |
| oracle | retail xstore point of service | Versi 15.0.4 |