← Back

CVE-2020-29582

nvd nist
Published: Feb 3, 2021Modified: Jun 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 3.9 / Impact: 1.4
Source: NVD

Description

In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permissions.

Affected (4)

Jetbrains
1 product
Kotlin
Oracle
3 products
Communications Cloud Native Core Network Slice Selection Function
Communications Cloud Native Core Policy
Communications Cloud Native Core Service Communication Proxy
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Kotlin
Before 2.1.0
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Communications Cloud Native Core Network Slice Selection Function
Version 1.2.1
Communications Cloud Native Core Policy
Version 1.14.0
Communications Cloud Native Core Service Communication Proxy
Version 1.14.0

Related CWEs

CWE-276
Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.

References (12)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory

Timeline

No history available yet.