CVE-2020-29582

Опубликовано: 03 фев. 2021

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permissions.

Ссылки

https://blog.jetbrains.com
Vendor Advisory
https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/
Vendor Advisory
https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe%40%3Cusers.kafka.apache.org%3E
Third Party Advisory
https://www.oracle.com//security-alerts/cpujul2021.html
Patch
Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2022.html
Patch
Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2022.html
Patch
Third Party Advisory
https://blog.jetbrains.com
Vendor Advisory
https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/
Vendor Advisory
https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe%40%3Cusers.kafka.apache.org%3E
Third Party Advisory
https://www.oracle.com//security-alerts/cpujul2021.html
Patch
Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2022.html
Patch
Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2022.html
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:jetbrains:kotlin:*:*:*:*:*:*:*:*

Версия до 2.1.0 (исключая)

Конфигурация 2

Одно из

cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:1.14.0:*:*:*:*:*:*:*

EPSS

Процентиль: 84%

0.02572

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-276

Связанные уязвимости

CVE-2020-29582

CVSS3: 5.3

ubuntu

больше 5 лет назад

CVE-2020-29582

CVSS3: 5.3

redhat

больше 5 лет назад

CVE-2020-29582

CVSS3: 5.3

debian

больше 5 лет назад

In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for ...

GHSA-cqj8-47ch-rvvq

CVSS3: 5.3

github

больше 4 лет назад

Incorrect Default Permissions in JetBrains Kotlin

BDU:2022-04645

CVSS3: 5.3

fstec

больше 5 лет назад

Уязвимость интерпретатора языка программирования JetBrains Kotlin, связанная с неправильными настройками прав доступа по умолчанию, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 84%

0.02572

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-276