CVE-2020-11979 affecting package ant 1.10.8-1

🗓️ 11 Aug 2021 06:39:28Reported by CBL MarinerType

cbl_mariner

cbl_mariner👁 15 Views

Package ant 1.10.8-1 has CVE-2020-11979. Update available

Reporter	Title	Published	Views	Family All 109
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Open Source software used by Cloud Pak System	31 Mar 202314:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Controller is affected by vulnerabilities	15 Apr 202503:54	–	ibm
IBM Security Bulletins	Security Bulletin: As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them	29 Mar 202121:08	–	ibm
IBM Security Bulletins	Security Bulletin: Gradle version in IBP javaenv and dind images depends on vulnerable Apache Ant	14 Dec 202014:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Ant affects IBM Spectrum Symphony	19 Jan 202104:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Control is vulnerable to multiple weaknesses related to jna-platform, ant, httpclient, http-cache-semantics	6 Oct 202308:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect Apache Ant shipped with IBM Operations Analytics - Log Analysis	3 Apr 202307:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerability issues affect IBM Spectrum Conductor 2.5.0	20 Feb 202106:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM webMethods BPM is vulnerable to a denial of service due to ant	5 Mar 202611:52	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in ant-1.8.1.jar affects IBM Cloud Pak for Data System 2.0 (CPDS 2.0)	31 Mar 202311:43	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
CBL-Mariner	1.0	all	ant	1.10.11-1	UNKNOWN

11 Aug 2021 06:39Current

9High risk

Vulners AI Score9

CVSS 25

CVSS 3.17.5

EPSS0.08235

package ant cve-2020-11979 update available unix