← Back

CVE-2020-1945

nvd nist
Published: May 14, 2020Modified: Jun 17, 2026

JSON object

Loading...
6.3
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Exploitability: 1.0 / Impact: 5.2
Source: NVD

Description

Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build tree allowing an attacker to inject modified source files into the build process.

Affected (117)

Products: Apache: Ant · Canonical: Ubuntu Linux · Fedoraproject: Fedora · +2 more
Show all products
Apache: Ant · Canonical: Ubuntu Linux · Fedoraproject: Fedora · Opensuse: Leap · Oracle: Agile Engineering Data Management, Banking Enterprise Collections, Banking Liquidity Management, Banking Platform, Business Process Management Suite, Category Management Planning & Optimization, Communications Asap, Communications Diameter Signaling Router, Communications Metasolv Solution, Communications Order And Service Management, Data Integrator, Endeca Information Discovery Studio, Enterprise Manager Ops Center, Enterprise Repository, Financial Services Analytical Applications Infrastructure, Flexcube Investor Servicing, Flexcube Private Banking, Health Sciences Information Manager, Primavera Gateway, Primavera Unifier, Rapid Planning, Real Time Decision Server, Retail Advanced Inventory Planning, Retail Assortment Planning, Retail Back Office, Retail Bulk Data Integration, Retail Central Office, Retail Data Extractor For Merchandising, Retail Extract Transform And Load, Retail Financial Integration, Retail Integration Bus, Retail Item Planning, Retail Macro Space Optimization, Retail Merchandise Financial Planning, Retail Merchandising System, Retail Point Of Service, Retail Predictive Application Server, Retail Regular Price Optimization, Retail Replenishment Optimization, Retail Returns Management, Retail Service Backbone, Retail Size Profile Optimization, Retail Store Inventory Management, Retail Xstore Point Of Service, Timesten In Memory Database, Utilities Framework
Apache
1 product
Ant
Canonical
1 product
Ubuntu Linux
Fedoraproject
1 product
Fedora
Opensuse
1 product
Leap
Oracle
46 products
Agile Engineering Data Management
Banking Enterprise Collections
Banking Liquidity Management
Banking Platform
Business Process Management Suite
Category Management Planning & Optimization
Communications Asap
Communications Diameter Signaling Router
Communications Metasolv Solution
Communications Order And Service Management
Data Integrator
Endeca Information Discovery Studio
Enterprise Manager Ops Center
Enterprise Repository
Financial Services Analytical Applications Infrastructure
Flexcube Investor Servicing
Flexcube Private Banking
Health Sciences Information Manager
Primavera Gateway
Primavera Unifier
Rapid Planning
Real Time Decision Server
Retail Advanced Inventory Planning
Retail Assortment Planning
Retail Back Office
Retail Bulk Data Integration
Retail Central Office
Retail Data Extractor For Merchandising
Retail Extract Transform And Load
Retail Financial Integration
Retail Integration Bus
Retail Item Planning
Retail Macro Space Optimization
Retail Merchandise Financial Planning
Retail Merchandising System
Retail Point Of Service
Retail Predictive Application Server
Retail Regular Price Optimization
Retail Replenishment Optimization
Retail Returns Management
Retail Service Backbone
Retail Size Profile Optimization
Retail Store Inventory Management
Retail Xstore Point Of Service
Timesten In Memory Database
Utilities Framework
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Apache
Ant
From 1.1 to 1.9.14
Ant
From 1.10.0 to 1.10.7
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Ubuntu Linux
Version 19.10
Configuration C
2 vulnerable
Vulnerable SoftwareAffected Versions
Fedoraproject
Fedora
Version 31
Fedora
Version 32
Configuration D
1 vulnerable
Vulnerable SoftwareAffected Versions
Leap
Version 15.2
Configuration E
111 vulnerable
Vulnerable SoftwareAffected Versions
Agile Engineering Data Management
Version 6.2.1.0
Banking Enterprise Collections
From 2.7.0 to 2.9.0
Banking Liquidity Management
From 14.0.0 to 14.4.0
Banking Platform
From 2.4.0 to 2.9.0
Oracle
Business Process Management Suite
Version 12.2.1.3.0
Business Process Management Suite
Version 12.2.1.4.0
Category Management Planning & Optimization
Version 15.0.3
Communications Asap
Version 7.3
Communications Diameter Signaling Router
From 8.0.0 to 8.2.2
Communications Metasolv Solution
Version 6.3.0
Oracle
Communications Order And Service Management
Version 7.3
Communications Order And Service Management
Version 7.4
Oracle
Data Integrator
Version 12.2.1.3.0
Data Integrator
Version 12.2.1.4.0
Endeca Information Discovery Studio
Version 3.2.0
Enterprise Manager Ops Center
Version 12.4.0.0
Enterprise Repository
Version 11.1.1.7.0
Financial Services Analytical Applications Infrastructure
From 8.0.6 to 8.1.0
Oracle
Flexcube Investor Servicing
Version 12.1.0
Flexcube Investor Servicing
Version 12.3.0
Flexcube Investor Servicing
Version 12.4.0
Flexcube Investor Servicing
Version 14.0.0
Flexcube Investor Servicing
Version 14.1.0
Oracle
Flexcube Private Banking
Version 12.0.0
Flexcube Private Banking
Version 12.1.0
Health Sciences Information Manager
From 3.0 to 3.0.2
Oracle
Primavera Gateway
From 16.2.0 to 16.2.11
Primavera Gateway
From 17.12.0 to 17.12.7
Oracle
Primavera Unifier
From 17.7 to 17.12
Primavera Unifier
Version 16.1
Primavera Unifier
Version 16.2
Primavera Unifier
Version 18.8
Primavera Unifier
Version 19.12
Oracle
Rapid Planning
Version 12.1
Rapid Planning
Version 12.2
Real Time Decision Server
Version 3.2.1.0
Oracle
Retail Advanced Inventory Planning
Version 14.1
Retail Advanced Inventory Planning
Version 15.0
Retail Advanced Inventory Planning
Version 16.0
Oracle
Retail Assortment Planning
Version 15.0.3
Retail Assortment Planning
Version 16.0.3
Oracle
Retail Back Office
Version 14.0
Retail Back Office
Version 14.1
Oracle
Retail Bulk Data Integration
Version 15.0
Retail Bulk Data Integration
Version 16.0.3.0
Retail Bulk Data Integration
Version 16.0
Retail Bulk Data Integration
Version 19.0.1
Oracle
Retail Central Office
Version 14.0
Retail Central Office
Version 14.1
Oracle
Retail Data Extractor For Merchandising
Version 1.10
Retail Data Extractor For Merchandising
Version 1.9
Oracle
Retail Extract Transform And Load
Version 13.2.5
Retail Extract Transform And Load
Version 13.2.8
Oracle
Retail Financial Integration
Version 14.1.3.2
Retail Financial Integration
Version 15.0.4.0
Retail Financial Integration
Version 15.0
Retail Financial Integration
Version 16.0.3.0
Retail Financial Integration
Version 16.0
Oracle
Retail Integration Bus
Version 14.1.3.2
Retail Integration Bus
Version 14.1
Retail Integration Bus
Version 15.0.4.0
Retail Integration Bus
Version 15.0
Retail Integration Bus
Version 16.0.3.0
Retail Integration Bus
Version 16.0
Retail Integration Bus
Version 19.0.1.0
Retail Item Planning
Version 15.0.3
Retail Macro Space Optimization
Version 15.0.3
Retail Merchandise Financial Planning
Version 15.0.3
Retail Merchandising System
Version 19.0.1
Oracle
Retail Point Of Service
Version 14.0
Retail Point Of Service
Version 14.1
Retail Point Of Service
Version 15.0
Retail Point Of Service
Version 16.0
Oracle
Retail Predictive Application Server
Version 14.0.3
Retail Predictive Application Server
Version 14.1.3
Retail Predictive Application Server
Version 15.0.3
Retail Predictive Application Server
Version 16.0.3.0
Retail Predictive Application Server
Version 16.0.3
Oracle
Retail Regular Price Optimization
Version 15.0.3
Retail Regular Price Optimization
Version 16.0.3
Retail Replenishment Optimization
Version 15.0.3
Oracle
Retail Returns Management
Version 14.0
Retail Returns Management
Version 14.1
Oracle
Retail Service Backbone
Version 14.1.3.2
Retail Service Backbone
Version 15.0.4.0
Retail Service Backbone
Version 15.0
Retail Service Backbone
Version 16.0.3.0
Retail Service Backbone
Version 16.0
Retail Service Backbone
Version 19.0.1.0
Oracle
Retail Size Profile Optimization
Version 15.0.3
Retail Size Profile Optimization
Version 16.0.3
Oracle
Retail Store Inventory Management
Version 14.0.4
Retail Store Inventory Management
Version 14.1.3
Retail Store Inventory Management
Version 14.1
Retail Store Inventory Management
Version 15.0.3
Retail Store Inventory Management
Version 15.0
Retail Store Inventory Management
Version 16.0.3
Retail Store Inventory Management
Version 16.0
Oracle
Retail Xstore Point Of Service
Version 15.0.4
Retail Xstore Point Of Service
Version 16.0.6
Retail Xstore Point Of Service
Version 17.0.4
Retail Xstore Point Of Service
Version 18.0.3
Retail Xstore Point Of Service
Version 19.0.2
Oracle
Timesten In Memory Database
Before 11.2.2.8.27
Timesten In Memory Database
Version 11.2.2.8.49
Oracle
Utilities Framework
From 4.3.0.1.0 to 4.3.0.6.0
Utilities Framework
Version 2.2.0.0.0
Utilities Framework
Version 4.2.0.2.0
Utilities Framework
Version 4.2.0.3.0
Utilities Framework
Version 4.4.0.0.0
Utilities Framework
Version 4.4.0.2.0

Related CWEs

CWE-668
Exposure of Resource to Wrong Sphere
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.

References (104)

Source: security@apache.org
Mailing ListThird Party Advisory
Source: security@apache.org
Mailing ListThird Party Advisory
Source: security@apache.org
Mailing ListThird Party Advisory
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Mailing ListVendor Advisory
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Third Party Advisory
Source: security@apache.org
Mailing ListVendor Advisory
Source: security@apache.org
PatchThird Party Advisory
Source: security@apache.org
PatchThird Party Advisory
Source: security@apache.org
PatchThird Party Advisory
Source: security@apache.org
PatchThird Party Advisory
Source: security@apache.org
PatchThird Party Advisory
Source: security@apache.org
PatchThird Party Advisory
Source: security@apache.org
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory

Timeline

No history available yet.