6.3

CVE-2020-1945

EPSS 0.02%
Published 14.05.2020 16:15:12
Last modified 21.11.2024 05:11:42
Source security@apache.org
Teams watchlist Login
Open Login

Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build tree allowing an attacker to inject modified source files into the build process.

Affected products Warnungen 0 Metrics 3 CWE 1 References 55

Data is provided by the National Vulnerability Database (NVD)

Apache ≫ Ant Version >= 1.1 <= 1.9.14

Apache ≫ Ant Version >= 1.10.0 <= 1.10.7

Canonical ≫ Ubuntu Linux Version19.10

Fedoraproject ≫ Fedora Version31

Fedoraproject ≫ Fedora Version32

Opensuse ≫ Leap Version15.2

Oracle ≫ Agile Engineering Data Management Version6.2.1.0

Oracle ≫ Banking Enterprise Collections Version >= 2.7.0 <= 2.9.0

Oracle ≫ Banking Liquidity Management Version >= 14.0.0 <= 14.4.0

Oracle ≫ Banking Platform Version >= 2.4.0 <= 2.9.0

Oracle ≫ Business Process Management Suite Version12.2.1.3.0

Oracle ≫ Business Process Management Suite Version12.2.1.4.0

Oracle ≫ Category Management Planning & Optimization Version15.0.3

Oracle ≫ Communications Asap Version7.3

Oracle ≫ Communications Diameter Signaling Router Version >= 8.0.0 <= 8.2.2

Oracle ≫ Communications Metasolv Solution Version6.3.0

Oracle ≫ Communications Order And Service Management Version7.3

Oracle ≫ Communications Order And Service Management Version7.4

Oracle ≫ Data Integrator Version12.2.1.3.0

Oracle ≫ Data Integrator Version12.2.1.4.0

Oracle ≫ Endeca Information Discovery Studio Version3.2.0

Oracle ≫ Enterprise Manager Ops Center Version12.4.0.0

Oracle ≫ Enterprise Repository Version11.1.1.7.0

Oracle ≫ Financial Services Analytical Applications Infrastructure Version >= 8.0.6 <= 8.1.0

Oracle ≫ Flexcube Investor Servicing Version12.1.0

Oracle ≫ Flexcube Investor Servicing Version12.3.0

Oracle ≫ Flexcube Investor Servicing Version12.4.0

Oracle ≫ Flexcube Investor Servicing Version14.0.0

Oracle ≫ Flexcube Investor Servicing Version14.1.0

Oracle ≫ Flexcube Private Banking Version12.0.0

Oracle ≫ Flexcube Private Banking Version12.1.0

Oracle ≫ Health Sciences Information Manager Version >= 3.0 <= 3.0.2

Oracle ≫ Primavera Gateway Version >= 16.2.0 <= 16.2.11

Oracle ≫ Primavera Gateway Version >= 17.12.0 <= 17.12.7

Oracle ≫ Primavera Unifier Version >= 17.7 <= 17.12

Oracle ≫ Primavera Unifier Version16.1

Oracle ≫ Primavera Unifier Version16.2

Oracle ≫ Primavera Unifier Version18.8

Oracle ≫ Primavera Unifier Version19.12

Oracle ≫ Rapid Planning Version12.1

Oracle ≫ Rapid Planning Version12.2

Oracle ≫ Real-time Decision Server Version3.2.1.0

Oracle ≫ Retail Advanced Inventory Planning Version14.1

Oracle ≫ Retail Advanced Inventory Planning Version15.0

Oracle ≫ Retail Advanced Inventory Planning Version16.0

Oracle ≫ Retail Assortment Planning Version15.0.3

Oracle ≫ Retail Assortment Planning Version16.0.3

Oracle ≫ Retail Back Office Version14.0

Oracle ≫ Retail Back Office Version14.1

Oracle ≫ Retail Bulk Data Integration Version15.0

Oracle ≫ Retail Bulk Data Integration Version16.0

Oracle ≫ Retail Bulk Data Integration Version16.0.3.0

Oracle ≫ Retail Bulk Data Integration Version19.0.1

Oracle ≫ Retail Central Office Version14.0

Oracle ≫ Retail Central Office Version14.1

Oracle ≫ Retail Data Extractor For Merchandising Version1.9

Oracle ≫ Retail Data Extractor For Merchandising Version1.10

Oracle ≫ Retail Extract Transform And Load Version13.2.5

Oracle ≫ Retail Extract Transform And Load Version13.2.8

Oracle ≫ Retail Financial Integration Version14.1.3.2

Oracle ≫ Retail Financial Integration Version15.0

Oracle ≫ Retail Financial Integration Version15.0.4.0

Oracle ≫ Retail Financial Integration Version16.0

Oracle ≫ Retail Financial Integration Version16.0.3.0

Oracle ≫ Retail Integration Bus Version14.1

Oracle ≫ Retail Integration Bus Version14.1.3.2

Oracle ≫ Retail Integration Bus Version15.0

Oracle ≫ Retail Integration Bus Version15.0.4.0

Oracle ≫ Retail Integration Bus Version16.0

Oracle ≫ Retail Integration Bus Version16.0.3.0

Oracle ≫ Retail Integration Bus Version19.0.1.0

Oracle ≫ Retail Item Planning Version15.0.3

Oracle ≫ Retail Macro Space Optimization Version15.0.3

Oracle ≫ Retail Merchandise Financial Planning Version15.0.3

Oracle ≫ Retail Merchandising System Version19.0.1

Oracle ≫ Retail Point-of-service Version14.0

Oracle ≫ Retail Point-of-service Version14.1

Oracle ≫ Retail Point-of-service Version15.0

Oracle ≫ Retail Point-of-service Version16.0

Oracle ≫ Retail Predictive Application Server Version14.0.3

Oracle ≫ Retail Predictive Application Server Version14.1.3

Oracle ≫ Retail Predictive Application Server Version15.0.3

Oracle ≫ Retail Predictive Application Server Version16.0.3

Oracle ≫ Retail Predictive Application Server Version16.0.3.0

Oracle ≫ Retail Regular Price Optimization Version15.0.3

Oracle ≫ Retail Regular Price Optimization Version16.0.3

Oracle ≫ Retail Replenishment Optimization Version15.0.3

Oracle ≫ Retail Returns Management Version14.0

Oracle ≫ Retail Returns Management Version14.1

Oracle ≫ Retail Service Backbone Version14.1.3.2

Oracle ≫ Retail Service Backbone Version15.0

Oracle ≫ Retail Service Backbone Version15.0.4.0

Oracle ≫ Retail Service Backbone Version16.0

Oracle ≫ Retail Service Backbone Version16.0.3.0

Oracle ≫ Retail Service Backbone Version19.0.1.0

Oracle ≫ Retail Size Profile Optimization Version15.0.3

Oracle ≫ Retail Size Profile Optimization Version16.0.3

Oracle ≫ Retail Store Inventory Management Version14.0.4

Oracle ≫ Retail Store Inventory Management Version14.1

Oracle ≫ Retail Store Inventory Management Version14.1.3

Oracle ≫ Retail Store Inventory Management Version15.0

Oracle ≫ Retail Store Inventory Management Version15.0.3

Oracle ≫ Retail Store Inventory Management Version16.0

Oracle ≫ Retail Store Inventory Management Version16.0.3

Oracle ≫ Retail Xstore Point Of Service Version15.0.4

Oracle ≫ Retail Xstore Point Of Service Version16.0.6

Oracle ≫ Retail Xstore Point Of Service Version17.0.4

Oracle ≫ Retail Xstore Point Of Service Version18.0.3

Oracle ≫ Retail Xstore Point Of Service Version19.0.2

Oracle ≫ Timesten In-memory Database Version < 11.2.2.8.27

Oracle ≫ Timesten In-memory Database Version11.2.2.8.49

Oracle ≫ Utilities Framework Version >= 4.3.0.1.0 <= 4.3.0.6.0

Oracle ≫ Utilities Framework Version2.2.0.0.0

Oracle ≫ Utilities Framework Version4.2.0.2.0

Oracle ≫ Utilities Framework Version4.2.0.3.0

Oracle ≫ Utilities Framework Version4.4.0.0.0

Oracle ≫ Utilities Framework Version4.4.0.2.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.02%	0.03

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.3	1	5.2	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
nvd@nist.gov	3.3	3.4	4.9	AV:L/AC:M/Au:N/C:P/I:P/A:N

CWE-668 Exposure of Resource to Wrong Sphere

The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.

https://www.oracle.com/security-alerts/cpujan2021.html

Patch

Third Party Advisory

https://www.oracle.com/security-alerts/cpujan2022.html

Patch

Third Party Advisory

https://www.oracle.com//security-alerts/cpujul2021.html

Patch

Third Party Advisory

https://www.oracle.com/security-alerts/cpuoct2021.html

Patch

Third Party Advisory

https://www.oracle.com/security-alerts/cpujul2020.html

Patch

Third Party Advisory

https://www.oracle.com/security-alerts/cpuoct2020.html

Patch

Third Party Advisory

https://www.oracle.com/security-alerts/cpuApr2021.html

Patch

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00053.html

Third Party Advisory

Mailing List

http://www.openwall.com/lists/oss-security/2020/09/30/6

Third Party Advisory

Mailing List

http://www.openwall.com/lists/oss-security/2020/12/06/1

Third Party Advisory

Mailing List

https://lists.apache.org/thread.html/r0d08a96ba9de8aa435f32944e8b2867c368a518d4ff57782e3637335%40%3Cissues.hive.apache.org%3E

https://lists.apache.org/thread.html/r107ea1b1a7a214bc72fe1a04207546ccef542146ae22952e1013b5cc%40%3Cdev.creadur.apache.org%3E

https://lists.apache.org/thread.html/r1863b9ce4c3e4b1e5b0c671ad05545ba3eb8399616aa746af5dfe1b1%40%3Cdev.creadur.apache.org%3E

https://lists.apache.org/thread.html/r1a9c992d7c8219dc15b4ad448649f0ffdaa88d76ef6a0035c49455f5%40%3Cdev.creadur.apache.org%3E

https://lists.apache.org/thread.html/r1b32c76afffcf676e13ed635a3332f3e46e6aaa7722eb3fc7a28f58e%40%3Cdev.hive.apache.org%3E

https://lists.apache.org/thread.html/r1dc8518dc99c42ecca5ff82d0d2de64cd5d3a4fa691eb9ee0304781e%40%3Cdev.creadur.apache.org%3E

https://lists.apache.org/thread.html/r2306b67f20c24942b872b0a41fbdc9330e8467388158bcd19c1094e0%40%3Cdev.creadur.apache.org%3E

https://lists.apache.org/thread.html/r2704fb14ce068c64759a986f81d5b5e42ab434fa13d0f444ad52816b%40%3Cdev.creadur.apache.org%3E

https://lists.apache.org/thread.html/r3cea0f3da4f6d06d7afb6c0804da8e01773a0f50a09b8d9beb2cda65%40%3Cissues.hive.apache.org%3E

https://lists.apache.org/thread.html/r4b2904d64affd4266cd72ccb2fc3927c1c2f22009f183095aa46bf90%40%3Cissues.hive.apache.org%3E

https://lists.apache.org/thread.html/r4ca33fad3fb39d130cda287d5a60727d9e706e6f2cf2339b95729490%40%3Cdev.creadur.apache.org%3E

https://lists.apache.org/thread.html/r5dfc77048b1f9db26622dce91a6edf083d499397256594952fad5f35%40%3Ccommits.myfaces.apache.org%3E

https://lists.apache.org/thread.html/r5e1cdd79f019162f76414708b2092acad0a6703d666d72d717319305%40%3Cdev.creadur.apache.org%3E

https://lists.apache.org/thread.html/r6030d34ceacd0098538425c5dac8251ffc7fd90b886942bc7ef87858%40%3Cnotifications.groovy.apache.org%3E

https://lists.apache.org/thread.html/r6970d196cd73863dafdbc3a7052562deedd338e3bd7d73d8171d92d6%40%3Ccommits.groovy.apache.org%3E

https://lists.apache.org/thread.html/r6e295d792032ec02b32be3846c21a58857fba4a077d22c5842d69ba2%40%3Ctorque-dev.db.apache.org%3E

https://lists.apache.org/thread.html/r6edd3e2cb79ee635630d891b54a4f1a9cd8c7f639d6ee34e75fbe830%40%3Cissues.hive.apache.org%3E

https://lists.apache.org/thread.html/r815f88d1044760176f30a4913b4baacd06f3eae4eb662de7388e46d8%40%3Cissues.hive.apache.org%3E

https://lists.apache.org/thread.html/r8e24abb7dd77cda14c6df90a377c94f0a413bbfcec90a29540ff8adf%40%3Cissues.hive.apache.org%3E

https://lists.apache.org/thread.html/r8e592bbfc016a5dbe2a8c0e81ff99682b9c78c453621b82c14e7b75e%40%3Cdev.ant.apache.org%3E

Vendor Advisory

Mailing List

https://lists.apache.org/thread.html/r95dc943e47a211d29df605e14f86c280fc9fa8d828b2b53bd07673c9%40%3Cdev.creadur.apache.org%3E

https://lists.apache.org/thread.html/ra12c3e23b021f259a201648005b9946acd7f618a6f32301c97047967%40%3Cannounce.apache.org%3E

https://lists.apache.org/thread.html/ra12c3e23b021f259a201648005b9946acd7f618a6f32301c97047967%40%3Cdev.groovy.apache.org%3E

https://lists.apache.org/thread.html/ra12c3e23b021f259a201648005b9946acd7f618a6f32301c97047967%40%3Cusers.groovy.apache.org%3E

https://lists.apache.org/thread.html/ra9dab34bf8625511f23692ad0fcee2725f782e9aad6c5cdff6cf4465%40%3Cnotifications.groovy.apache.org%3E

https://lists.apache.org/thread.html/raaeddc41da8f3afb1cb224876084a45f68e437a0afd9889a707e4b0c%40%3Cdev.creadur.apache.org%3E

https://lists.apache.org/thread.html/rb860063819b9c0990e1fbce29d83f4554766fe5a05e3b3939736bf2b%40%3Ccommits.myfaces.apache.org%3E

https://lists.apache.org/thread.html/rb8ec556f176c83547b959150e2108e2ddf1d61224295941908b0a81f%40%3Cannounce.apache.org%3E

https://lists.apache.org/thread.html/rbfe9ba28b74f39f46ec1bbbac3bef313f35017cf3aac13841a84483a%40%3Cdev.creadur.apache.org%3E

https://lists.apache.org/thread.html/rc3c8ef9724b5b1e171529b47f4b35cb7920edfb6e917fa21eb6c64ea%40%3Cdev.ant.apache.org%3E

https://lists.apache.org/thread.html/rc89e491b5b270fb40f1210b70554527b737c217ad2e831b643ead6bc%40%3Cuser.ant.apache.org%3E

https://lists.apache.org/thread.html/rce099751721c26a8166d8b6578293820832831a0b2cb8d93b8efa081%40%3Cnotifications.groovy.apache.org%3E

https://lists.apache.org/thread.html/rd7dda48ff835f4d0293949837d55541bfde3683bd35bd8431e324538%40%3Cdev.creadur.apache.org%3E

https://lists.apache.org/thread.html/rda80ac59119558eaec452e58ddfac2ccc9211da1c65f7927682c78b1%40%3Cdev.creadur.apache.org%3E

https://lists.apache.org/thread.html/rdaa9c51d5dc6560c9d2b3f3d742c768ad0705e154041e574a0fae45c%40%3Cnotifications.groovy.apache.org%3E

https://lists.apache.org/thread.html/re1ce84518d773a94a613d988771daf9252c9cf7375a9a477009f9735%40%3Ccommits.creadur.apache.org%3E

https://lists.apache.org/thread.html/rf07feaf78afc8f701e21948a06ef92565d3dff1242d710f4fbf900b2%40%3Cdev.creadur.apache.org%3E

https://lists.apache.org/thread.html/rfd346609527a79662c48b1da3ac500ec30f29f7ddaa3575051e81890%40%3Ccommits.creadur.apache.org%3E

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EQBR65TINSJRN7PTPIVNYS33P535WM74/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RRVAWTCVXJMRYKQKEXYSNBF7NLSR6OEI/

https://security.gentoo.org/glsa/202007-34

Third Party Advisory

https://usn.ubuntu.com/4380-1/

Vendor Advisory

Mailing List

https://nvd.nist.gov/vuln/detail/CVE-2020-1945

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-1945

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-1945

EUVD