CVE-2020-1945

EPSS 1.81%
Veröffentlicht 14.05.2020 16:15:12
Zuletzt bearbeitet 21.11.2024 05:11:42
Erkennungen
Login

Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build tree allowing an attacker to inject modified source files into the build process.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 55

NVD 117 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apache ≫ Ant Version >= 1.1 <= 1.9.14

Apache ≫ Ant Version >= 1.10.0 <= 1.10.7

Canonical ≫ Ubuntu Linux Version 19.10

Fedoraproject ≫ Fedora Version 31

Fedoraproject ≫ Fedora Version 32

Opensuse ≫ Leap Version 15.2

Oracle ≫ Agile Engineering Data Management Version 6.2.1.0

Oracle ≫ Banking Enterprise Collections Version >= 2.7.0 <= 2.9.0

Oracle ≫ Banking Liquidity Management Version >= 14.0.0 <= 14.4.0

Oracle ≫ Banking Platform Version >= 2.4.0 <= 2.9.0

Oracle ≫ Business Process Management Suite Version 12.2.1.3.0

Oracle ≫ Business Process Management Suite Version 12.2.1.4.0

Oracle ≫ Category Management Planning & Optimization Version 15.0.3

Oracle ≫ Communications Asap Version 7.3

Oracle ≫ Communications Diameter Signaling Router Version >= 8.0.0 <= 8.2.2

Oracle ≫ Communications Metasolv Solution Version 6.3.0

Oracle ≫ Communications Order And Service Management Version 7.3

Oracle ≫ Communications Order And Service Management Version 7.4

Oracle ≫ Data Integrator Version 12.2.1.3.0

Oracle ≫ Data Integrator Version 12.2.1.4.0

Oracle ≫ Endeca Information Discovery Studio Version 3.2.0

Oracle ≫ Enterprise Manager Ops Center Version 12.4.0.0

Oracle ≫ Enterprise Repository Version 11.1.1.7.0

Oracle ≫ Financial Services Analytical Applications Infrastructure Version >= 8.0.6 <= 8.1.0

Oracle ≫ Flexcube Investor Servicing Version 12.1.0

Oracle ≫ Flexcube Investor Servicing Version 12.3.0

Oracle ≫ Flexcube Investor Servicing Version 12.4.0

Oracle ≫ Flexcube Investor Servicing Version 14.0.0

Oracle ≫ Flexcube Investor Servicing Version 14.1.0

Oracle ≫ Flexcube Private Banking Version 12.0.0

Oracle ≫ Flexcube Private Banking Version 12.1.0

Oracle ≫ Health Sciences Information Manager Version >= 3.0 <= 3.0.2

Oracle ≫ Primavera Gateway Version >= 16.2.0 <= 16.2.11

Oracle ≫ Primavera Gateway Version >= 17.12.0 <= 17.12.7

Oracle ≫ Primavera Unifier Version >= 17.7 <= 17.12

Oracle ≫ Primavera Unifier Version 16.1

Oracle ≫ Primavera Unifier Version 16.2

Oracle ≫ Primavera Unifier Version 18.8

Oracle ≫ Primavera Unifier Version 19.12

Oracle ≫ Rapid Planning Version 12.1

Oracle ≫ Rapid Planning Version 12.2

Oracle ≫ Real-time Decision Server Version 3.2.1.0

Oracle ≫ Retail Advanced Inventory Planning Version 14.1

Oracle ≫ Retail Advanced Inventory Planning Version 15.0

Oracle ≫ Retail Advanced Inventory Planning Version 16.0

Oracle ≫ Retail Assortment Planning Version 15.0.3

Oracle ≫ Retail Assortment Planning Version 16.0.3

Oracle ≫ Retail Back Office Version 14.0

Oracle ≫ Retail Back Office Version 14.1

Oracle ≫ Retail Bulk Data Integration Version 15.0

Oracle ≫ Retail Bulk Data Integration Version 16.0

Oracle ≫ Retail Bulk Data Integration Version 16.0.3.0

Oracle ≫ Retail Bulk Data Integration Version 19.0.1

Oracle ≫ Retail Central Office Version 14.0

Oracle ≫ Retail Central Office Version 14.1

Oracle ≫ Retail Data Extractor For Merchandising Version 1.9

Oracle ≫ Retail Data Extractor For Merchandising Version 1.10

Oracle ≫ Retail Extract Transform And Load Version 13.2.5

Oracle ≫ Retail Extract Transform And Load Version 13.2.8

Oracle ≫ Retail Financial Integration Version 14.1.3.2

Oracle ≫ Retail Financial Integration Version 15.0

Oracle ≫ Retail Financial Integration Version 15.0.4.0

Oracle ≫ Retail Financial Integration Version 16.0

Oracle ≫ Retail Financial Integration Version 16.0.3.0

Oracle ≫ Retail Integration Bus Version 14.1

Oracle ≫ Retail Integration Bus Version 14.1.3.2

Oracle ≫ Retail Integration Bus Version 15.0

Oracle ≫ Retail Integration Bus Version 15.0.4.0

Oracle ≫ Retail Integration Bus Version 16.0

Oracle ≫ Retail Integration Bus Version 16.0.3.0

Oracle ≫ Retail Integration Bus Version 19.0.1.0

Oracle ≫ Retail Item Planning Version 15.0.3

Oracle ≫ Retail Macro Space Optimization Version 15.0.3

Oracle ≫ Retail Merchandise Financial Planning Version 15.0.3

Oracle ≫ Retail Merchandising System Version 19.0.1

Oracle ≫ Retail Point-of-service Version 14.0

Oracle ≫ Retail Point-of-service Version 14.1

Oracle ≫ Retail Point-of-service Version 15.0

Oracle ≫ Retail Point-of-service Version 16.0

Oracle ≫ Retail Predictive Application Server Version 14.0.3

Oracle ≫ Retail Predictive Application Server Version 14.1.3

Oracle ≫ Retail Predictive Application Server Version 15.0.3

Oracle ≫ Retail Predictive Application Server Version 16.0.3

Oracle ≫ Retail Predictive Application Server Version 16.0.3.0

Oracle ≫ Retail Regular Price Optimization Version 15.0.3

Oracle ≫ Retail Regular Price Optimization Version 16.0.3

Oracle ≫ Retail Replenishment Optimization Version 15.0.3

Oracle ≫ Retail Returns Management Version 14.0

Oracle ≫ Retail Returns Management Version 14.1

Oracle ≫ Retail Service Backbone Version 14.1.3.2

Oracle ≫ Retail Service Backbone Version 15.0

Oracle ≫ Retail Service Backbone Version 15.0.4.0

Oracle ≫ Retail Service Backbone Version 16.0

Oracle ≫ Retail Service Backbone Version 16.0.3.0

Oracle ≫ Retail Service Backbone Version 19.0.1.0

Oracle ≫ Retail Size Profile Optimization Version 15.0.3

Oracle ≫ Retail Size Profile Optimization Version 16.0.3

Oracle ≫ Retail Store Inventory Management Version 14.0.4

Oracle ≫ Retail Store Inventory Management Version 14.1

Oracle ≫ Retail Store Inventory Management Version 14.1.3

Oracle ≫ Retail Store Inventory Management Version 15.0

Oracle ≫ Retail Store Inventory Management Version 15.0.3

Oracle ≫ Retail Store Inventory Management Version 16.0

Oracle ≫ Retail Store Inventory Management Version 16.0.3

Oracle ≫ Retail Xstore Point Of Service Version 15.0.4

Oracle ≫ Retail Xstore Point Of Service Version 16.0.6

Oracle ≫ Retail Xstore Point Of Service Version 17.0.4

Oracle ≫ Retail Xstore Point Of Service Version 18.0.3

Oracle ≫ Retail Xstore Point Of Service Version 19.0.2

Oracle ≫ Timesten In-memory Database Version < 11.2.2.8.27

Oracle ≫ Timesten In-memory Database Version 11.2.2.8.49

Oracle ≫ Utilities Framework Version >= 4.3.0.1.0 <= 4.3.0.6.0

Oracle ≫ Utilities Framework Version 2.2.0.0.0

Oracle ≫ Utilities Framework Version 4.2.0.2.0

Oracle ≫ Utilities Framework Version 4.2.0.3.0

Oracle ≫ Utilities Framework Version 4.4.0.0.0

Oracle ≫ Utilities Framework Version 4.4.0.2.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.81%	0.761

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.3	1	5.2	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
NIST	3.3	3.4	4.9	AV:L/AC:M/Au:N/C:P/I:P/A:N

CWE-668 Exposure of Resource to Wrong Sphere

The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.

https://www.oracle.com/security-alerts/cpujan2021.html

Patch

Third Party Advisory

https://www.oracle.com/security-alerts/cpujan2022.html

Patch

Third Party Advisory

https://www.oracle.com//security-alerts/cpujul2021.html

Patch

Third Party Advisory

https://www.oracle.com/security-alerts/cpuoct2021.html

Patch

Third Party Advisory

https://www.oracle.com/security-alerts/cpujul2020.html

Patch

Third Party Advisory

https://www.oracle.com/security-alerts/cpuoct2020.html

Patch

Third Party Advisory

https://www.oracle.com/security-alerts/cpuApr2021.html

Patch

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00053.html

Third Party Advisory

Mailing List

http://www.openwall.com/lists/oss-security/2020/09/30/6

Third Party Advisory

Mailing List

http://www.openwall.com/lists/oss-security/2020/12/06/1

Third Party Advisory

Mailing List

https://lists.apache.org/thread.html/r0d08a96ba9de8aa435f32944e8b2867c368a518d4ff57782e3637335%40%3Cissues.hive.apache.org%3E

https://lists.apache.org/thread.html/r107ea1b1a7a214bc72fe1a04207546ccef542146ae22952e1013b5cc%40%3Cdev.creadur.apache.org%3E

https://lists.apache.org/thread.html/r1863b9ce4c3e4b1e5b0c671ad05545ba3eb8399616aa746af5dfe1b1%40%3Cdev.creadur.apache.org%3E

https://lists.apache.org/thread.html/r1a9c992d7c8219dc15b4ad448649f0ffdaa88d76ef6a0035c49455f5%40%3Cdev.creadur.apache.org%3E

https://lists.apache.org/thread.html/r1b32c76afffcf676e13ed635a3332f3e46e6aaa7722eb3fc7a28f58e%40%3Cdev.hive.apache.org%3E

https://lists.apache.org/thread.html/r1dc8518dc99c42ecca5ff82d0d2de64cd5d3a4fa691eb9ee0304781e%40%3Cdev.creadur.apache.org%3E

https://lists.apache.org/thread.html/r2306b67f20c24942b872b0a41fbdc9330e8467388158bcd19c1094e0%40%3Cdev.creadur.apache.org%3E

https://lists.apache.org/thread.html/r2704fb14ce068c64759a986f81d5b5e42ab434fa13d0f444ad52816b%40%3Cdev.creadur.apache.org%3E

https://lists.apache.org/thread.html/r3cea0f3da4f6d06d7afb6c0804da8e01773a0f50a09b8d9beb2cda65%40%3Cissues.hive.apache.org%3E

https://lists.apache.org/thread.html/r4b2904d64affd4266cd72ccb2fc3927c1c2f22009f183095aa46bf90%40%3Cissues.hive.apache.org%3E

https://lists.apache.org/thread.html/r4ca33fad3fb39d130cda287d5a60727d9e706e6f2cf2339b95729490%40%3Cdev.creadur.apache.org%3E

https://lists.apache.org/thread.html/r5dfc77048b1f9db26622dce91a6edf083d499397256594952fad5f35%40%3Ccommits.myfaces.apache.org%3E

https://lists.apache.org/thread.html/r5e1cdd79f019162f76414708b2092acad0a6703d666d72d717319305%40%3Cdev.creadur.apache.org%3E

https://lists.apache.org/thread.html/r6030d34ceacd0098538425c5dac8251ffc7fd90b886942bc7ef87858%40%3Cnotifications.groovy.apache.org%3E

https://lists.apache.org/thread.html/r6970d196cd73863dafdbc3a7052562deedd338e3bd7d73d8171d92d6%40%3Ccommits.groovy.apache.org%3E

https://lists.apache.org/thread.html/r6e295d792032ec02b32be3846c21a58857fba4a077d22c5842d69ba2%40%3Ctorque-dev.db.apache.org%3E

https://lists.apache.org/thread.html/r6edd3e2cb79ee635630d891b54a4f1a9cd8c7f639d6ee34e75fbe830%40%3Cissues.hive.apache.org%3E

https://lists.apache.org/thread.html/r815f88d1044760176f30a4913b4baacd06f3eae4eb662de7388e46d8%40%3Cissues.hive.apache.org%3E

https://lists.apache.org/thread.html/r8e24abb7dd77cda14c6df90a377c94f0a413bbfcec90a29540ff8adf%40%3Cissues.hive.apache.org%3E

https://lists.apache.org/thread.html/r8e592bbfc016a5dbe2a8c0e81ff99682b9c78c453621b82c14e7b75e%40%3Cdev.ant.apache.org%3E

Vendor Advisory

Mailing List

https://lists.apache.org/thread.html/r95dc943e47a211d29df605e14f86c280fc9fa8d828b2b53bd07673c9%40%3Cdev.creadur.apache.org%3E

https://lists.apache.org/thread.html/ra12c3e23b021f259a201648005b9946acd7f618a6f32301c97047967%40%3Cannounce.apache.org%3E

https://lists.apache.org/thread.html/ra12c3e23b021f259a201648005b9946acd7f618a6f32301c97047967%40%3Cdev.groovy.apache.org%3E

https://lists.apache.org/thread.html/ra12c3e23b021f259a201648005b9946acd7f618a6f32301c97047967%40%3Cusers.groovy.apache.org%3E

https://lists.apache.org/thread.html/ra9dab34bf8625511f23692ad0fcee2725f782e9aad6c5cdff6cf4465%40%3Cnotifications.groovy.apache.org%3E

https://lists.apache.org/thread.html/raaeddc41da8f3afb1cb224876084a45f68e437a0afd9889a707e4b0c%40%3Cdev.creadur.apache.org%3E

https://lists.apache.org/thread.html/rb860063819b9c0990e1fbce29d83f4554766fe5a05e3b3939736bf2b%40%3Ccommits.myfaces.apache.org%3E

https://lists.apache.org/thread.html/rb8ec556f176c83547b959150e2108e2ddf1d61224295941908b0a81f%40%3Cannounce.apache.org%3E

https://lists.apache.org/thread.html/rbfe9ba28b74f39f46ec1bbbac3bef313f35017cf3aac13841a84483a%40%3Cdev.creadur.apache.org%3E

https://lists.apache.org/thread.html/rc3c8ef9724b5b1e171529b47f4b35cb7920edfb6e917fa21eb6c64ea%40%3Cdev.ant.apache.org%3E

https://lists.apache.org/thread.html/rc89e491b5b270fb40f1210b70554527b737c217ad2e831b643ead6bc%40%3Cuser.ant.apache.org%3E

https://lists.apache.org/thread.html/rce099751721c26a8166d8b6578293820832831a0b2cb8d93b8efa081%40%3Cnotifications.groovy.apache.org%3E

https://lists.apache.org/thread.html/rd7dda48ff835f4d0293949837d55541bfde3683bd35bd8431e324538%40%3Cdev.creadur.apache.org%3E

https://lists.apache.org/thread.html/rda80ac59119558eaec452e58ddfac2ccc9211da1c65f7927682c78b1%40%3Cdev.creadur.apache.org%3E

https://lists.apache.org/thread.html/rdaa9c51d5dc6560c9d2b3f3d742c768ad0705e154041e574a0fae45c%40%3Cnotifications.groovy.apache.org%3E

https://lists.apache.org/thread.html/re1ce84518d773a94a613d988771daf9252c9cf7375a9a477009f9735%40%3Ccommits.creadur.apache.org%3E

https://lists.apache.org/thread.html/rf07feaf78afc8f701e21948a06ef92565d3dff1242d710f4fbf900b2%40%3Cdev.creadur.apache.org%3E

https://lists.apache.org/thread.html/rfd346609527a79662c48b1da3ac500ec30f29f7ddaa3575051e81890%40%3Ccommits.creadur.apache.org%3E

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EQBR65TINSJRN7PTPIVNYS33P535WM74/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RRVAWTCVXJMRYKQKEXYSNBF7NLSR6OEI/

https://security.gentoo.org/glsa/202007-34

Third Party Advisory

https://usn.ubuntu.com/4380-1/

Vendor Advisory

Mailing List

https://nvd.nist.gov/vuln/detail/CVE-2020-1945

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-1945

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-1945

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2020-1945