CVSS 6.3 · Medium EPSS 1,8%
Kerentanan Exposure of Resource to Wrong Sphere pada apache ant, canonical ubuntu linux +32 lainnya. Skor CVSS 3.1 6.3 (Medium) menurut NVD.
Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build tree allowing an attacker to inject modified source files into the build process.
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| apache | ant | Versi 1.1 hingga 1.9.14 |
| apache | ant | Versi 1.10.0 hingga 1.10.7 |
| canonical | ubuntu linux | Versi 19.10 |
| fedoraproject | fedora | Versi 31 |
| fedoraproject | fedora | Versi 32 |
| opensuse | leap | Versi 15.2 |
| oracle | agile engineering data management | Versi 6.2.1.0 |
| oracle | banking enterprise collections | Versi 2.7.0 hingga 2.9.0 |
| oracle | banking liquidity management | Versi 14.0.0 hingga 14.4.0 |
| oracle | banking platform | Versi 2.4.0 hingga 2.9.0 |
| oracle | business process management suite | Versi 12.2.1.3.0 |
| oracle | business process management suite | Versi 12.2.1.4.0 |
| oracle | category management planning & optimization | Versi 15.0.3 |
| oracle | communications asap | Versi 7.3 |
| oracle | communications diameter signaling router | Versi 8.0.0 hingga 8.2.2 |
| oracle | communications metasolv solution | Versi 6.3.0 |
| oracle | communications order and service management | Versi 7.3 |
| oracle | communications order and service management | Versi 7.4 |
| oracle | data integrator | Versi 12.2.1.3.0 |
| oracle | data integrator | Versi 12.2.1.4.0 |
| oracle | endeca information discovery studio | Versi 3.2.0 |
| oracle | enterprise manager ops center | Versi 12.4.0.0 |
| oracle | enterprise repository | Versi 11.1.1.7.0 |
| oracle | financial services analytical applications infrastructure | Versi 8.0.6 hingga 8.1.0 |
| oracle | flexcube investor servicing | Versi 12.1.0 |
| oracle | flexcube investor servicing | Versi 12.3.0 |
| oracle | flexcube investor servicing | Versi 12.4.0 |
| oracle | flexcube investor servicing | Versi 14.0.0 |
| oracle | flexcube investor servicing | Versi 14.1.0 |
| oracle | flexcube private banking | Versi 12.0.0 |
| oracle | flexcube private banking | Versi 12.1.0 |
| oracle | health sciences information manager | Versi 3.0 hingga 3.0.2 |
| oracle | primavera gateway | Versi 16.2.0 hingga 16.2.11 |
| oracle | primavera gateway | Versi 17.12.0 hingga 17.12.7 |
| oracle | primavera unifier | Versi 17.7 hingga 17.12 |
| oracle | primavera unifier | Versi 16.1 |
| oracle | primavera unifier | Versi 16.2 |
| oracle | primavera unifier | Versi 18.8 |
| oracle | primavera unifier | Versi 19.12 |
| oracle | rapid planning | Versi 12.1 |
| oracle | rapid planning | Versi 12.2 |
| oracle | real-time decision server | Versi 3.2.1.0 |
| oracle | retail advanced inventory planning | Versi 14.1 |
| oracle | retail advanced inventory planning | Versi 15.0 |
| oracle | retail advanced inventory planning | Versi 16.0 |
| oracle | retail assortment planning | Versi 15.0.3 |
| oracle | retail assortment planning | Versi 16.0.3 |
| oracle | retail back office | Versi 14.0 |
| oracle | retail back office | Versi 14.1 |
| oracle | retail bulk data integration | Versi 15.0 |
| oracle | retail bulk data integration | Versi 16.0 |
| oracle | retail bulk data integration | Versi 16.0.3.0 |
| oracle | retail bulk data integration | Versi 19.0.1 |
| oracle | retail central office | Versi 14.0 |
| oracle | retail central office | Versi 14.1 |
| oracle | retail data extractor for merchandising | Versi 1.9 |
| oracle | retail data extractor for merchandising | Versi 1.10 |
| oracle | retail extract transform and load | Versi 13.2.5 |
| oracle | retail extract transform and load | Versi 13.2.8 |
| oracle | retail financial integration | Versi 14.1.3.2 |