Lucene search
+L

996 matches found

OSV
OSV
added 2020/10/01 8:15 p.m.3 views

DEBIAN-CVE-2020-11979

As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the...

7.5CVSS7.7AI score0.08235EPSS
Exploits0References1
NVD
NVD
added 2020/10/01 8:15 p.m.26 views

CVE-2020-11979

As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the...

7.5CVSS0.08235EPSS
Exploits0References19
OSV
OSV
added 2020/10/01 8:15 p.m.34 views

CVE-2020-11979

As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the...

7.5CVSS6.7AI score
Exploits0References19
UbuntuCve
UbuntuCve
added 2020/10/01 8:15 p.m.40 views

CVE-2020-11979

As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the...

7.5CVSS7.1AI score0.08235EPSS
Exploits0References2
Prion
Prion
added 2020/10/01 8:15 p.m.30 views

Design/Logic Flaw

As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the...

5CVSS6.3AI score0.08235EPSS
Exploits0References19Affected Software37
OSV
OSV
added 2020/10/01 8:15 p.m.4 views

UBUNTU-CVE-2020-11979

As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the...

7.5CVSS7.1AI score0.08235EPSS
Exploits0References3
Cvelist
Cvelist
added 2020/10/01 7:24 p.m.37 views

CVE-2020-11979

As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the...

7AI score0.08235EPSS
Exploits0References19
CVE
CVE
added 2020/10/01 7:24 p.m.320 views

CVE-2020-11979

CVE-2020-11979 affects Apache Ant 1.10.8. The mitigation for CVE-2020-1945 changed temp-file permissions, but the fixcrlf task deleted the temp file and recreated it without protection, enabling an attacker to inject modified source files during builds. Connected advisories confirm the issue and ...

7.5CVSS6.9AI score0.08235EPSS
Exploits0References19Affected Software1
Debian CVE
Debian CVE
added 2020/10/01 7:24 p.m.57 views

CVE-2020-11979

As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the...

7.5CVSS7.7AI score0.08235EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2020/10/01 7:24 p.m.50 views

CVE-2020-11979

As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the...

7.5CVSS7.2AI score0.08235EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2020/09/29 12:0 a.m.35 views

FreeBSD : Apache Ant leaks sensitive information via the java.io.tmpdir (6d5f1b0b-b865-48d5-935b-3fb6ebb425fc)

Apache reports : Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory bac...

6.3CVSS7.1AI score0.01808EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2020/09/29 12:0 a.m.22 views

Huawei EulerOS: Security Advisory for ant (EulerOS-SA-2020-2132)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.3CVSS7.1AI score0.01808EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2020/09/28 12:0 a.m.42 views

EulerOS 2.0 SP3 : ant (EulerOS-SA-2020-2132)

According to the version of the ant package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several...

6.3CVSS7.2AI score0.01808EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2020/09/14 6:13 p.m.65 views

Sensitive Data Exposure in Apache Ant

Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build...

6.3CVSS2.7AI score0.01808EPSS
Exploits0References54Affected Software1
OSV
OSV
added 2020/09/14 6:13 p.m.5 views

GHSA-4P6W-M9WC-C9C9 Sensitive Data Exposure in Apache Ant

Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build...

6.3CVSS6.8AI score0.01808EPSS
Exploits0References53
IBM Security Bulletins
IBM Security Bulletins
added 2020/09/07 7:52 a.m.35 views

Security Bulletin: Vulnerability in Apache Ant affects IBM Platform Symphony and IBM Spectrum Symphony

Summary These interim fixes provide instructions on upgrading Apache Ant to 1.10.8 in IBM Platform Symphony 7.1 Fix Pack 1, IBM Platform Symphony 7.1.1, IBM Spectrum Symphony 7.1.2, IBM Spectrum Symphony 7.2.0.2, IBM Spectrum Symphony 7.2.1, and IBM Spectrum Symphony 7.3 in order to address...

6.3CVSS0.7AI score0.01808EPSS
Exploits0Affected Software1
OpenVAS
OpenVAS
added 2020/09/04 12:0 a.m.29 views

Huawei EulerOS: Security Advisory for ant (EulerOS-SA-2020-1915)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.3CVSS7.1AI score0.01808EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2020/09/02 12:0 a.m.32 views

EulerOS 2.0 SP5 : ant (EulerOS-SA-2020-1915)

According to the version of the ant package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several...

6.3CVSS7.2AI score0.01808EPSS
Exploits0References2
Openbugbounty
Openbugbounty
added 2020/08/27 9:5 a.m.10 views

ant-pc.com Improper Access Control vulnerability OBB-1279367

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

1AI score
Exploits0
OpenVAS
OpenVAS
added 2020/07/31 12:0 a.m.11 views

Huawei EulerOS: Security Advisory for ant (EulerOS-SA-2020-1794)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.3CVSS7.1AI score0.01808EPSS
Exploits0References2
Rows per page
Query Builder