CVE-2020-29582

MEDIUM5.3EPSS 0.00%

Incorrect Default Permissions in JetBrains Kotlin

發布日:2022/5/24修改日:2026/5/10

也稱為:DEBIAN-CVE-2020-29582

描述

In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permissions.

受影響套件(2)

Debian/kotlinfrom 0
Maven/org.jetbrains.kotlin:kotlin-stdlibfrom 0, < 1.4.21

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	MEDIUM5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

參考連結(8)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2020-29582
ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2020-29582
WEBhttps://blog.jetbrains.com
WEBhttps://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020
WEBhttps://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe@%3Cusers.kafka.apache.org%3E
WEBhttps://www.oracle.com/security-alerts/cpuapr2022.html
WEBhttps://www.oracle.com/security-alerts/cpujan2022.html
WEBhttps://www.oracle.com//security-alerts/cpujul2021.html