The vulnerability of the JetBrains Kotlin programming language interpreter arises from incorrect default access rights settings, allowing attackers to exploit the system to disclose protected information.

🗓️ 27 Jul 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

JetBrains Kotlin interpreter flaw from incorrect default access rights enabling remote disclosure.

Reporter	Title	Published	Views	Family All 43
IBM Security Bulletins	Security Bulletin: Due to the use of JetBrains Kotlin, IBM webMethods BPM is vulnerable to the use of Java API for temporary file and folder creation	9 Mar 202614:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Kotlin	1 Oct 202106:22	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in JetBrains Kotlin affects watsonx.data	7 Feb 202510:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM webMethods BPM is vulnerable to a denial of service due to kotlin-stdlib	17 Feb 202604:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is vulnerable to a Broken Access Control attack and Post Exploitation attacks due to the Kotlin component (CVE-2020-29582,CVE-2022-24329).	25 Jun 202409:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Cloud Pak for Watson AIOPs	3 Oct 202218:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	5 Dec 202219:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	5 Dec 202219:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by vulnerabilties	27 Jan 202320:06	–	ibm
Chainguard	CVE-2020-29582 vulnerabilities	3 Feb 202116:15	–	cgr

Vulners

Node

oracle oracle_communications_cloud_native_core_policyMatch1.14.0

OR

jetbrains kotlinRange<1.4.21

OR

oracle oracle_communications_network_slice_selection_function_(ocnssf)Match1.2.1

OR

oracle oracle_communications_cloud_native_core_service_communication_proxy_(scp)Match1.14.0

OR

ibm ibm_cloud_transformation_advisorRange2.0.1–3.1.0

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-29582
vuldb	www.vuldb.com/ru/
ibm	www.ibm.com/blogs/psirt/security-bulletin-ibm-cloud-transformation-advisor-is-vulnerable-to-multiple-vulnerabilities-3/
blog	www.blog.jetbrains.com/
oracle	www.oracle.com//security-alerts/cpujul2021.html
oracle	www.oracle.com/security-alerts/cpuapr2022.html
oracle	www.oracle.com/security-alerts/cpujan2022.html
web	www.web.nvd.nist.gov/view/vuln/detail

27 Jul 2022 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 25

CVSS 35.3

EPSS0.02572

JetBrains Kotlin interpreter default access rights remote disclosure