Security Bulletin: Due to the use of JetBrains Kotlin, IBM webMethods BPM is vulnerable to the use of Java API for temporary file and folder creation

Summary IBM webMethods BPM uses JetBrains Kotlin which is vulnerable to the use of Java API for temporary file and folder creation. Vulnerability Details CVEID:CVE-2020-29582 DESCRIPTION: In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An...

Security Bulletin: IBM Event Streams is vulnerable to a Broken Access Control attack and Post Exploitation attacks due to the Kotlin component (CVE-2020-29582,CVE-2022-24329).

Summary IBM Event Streams is vulnerable to a Broken Access Control attack and Post Exploitation attacks due to the JetBrains Kotlin component. JetBrains Kotlin is used in event streams to simplify the development process with its concise syntax, enhance code safety with nullability features, and...

CodeLineCounter:lineCounterPlugin (>=1.1.1 <=1.1.4), ae.teletronics.nlp:categorisation (>=1.3 <=1.6) +18273 more potentially affected by CVE-2020-29582 via org.jetbrains.kotlin:kotlin-stdlib (>=0.0.2-test-deploy <=1.4.21-2)

org.jetbrains.kotlin:kotlin-stdlib MAVEN version =0.0.2-test-deploy, =1.1.1, =1.3, =1.3, =1.0.1, =0.0.1, =1.2, =1.2, =1.2.3, =1.2.3, =v0.0.1, =0.1.12, =0.1.2, =0.0.12, =0.0.12, =1.0.0, =1.0.1 and more Source cves: CVE-2020-29582 Source advisory: OSV:GHSA-CQJ8-47CH-RVVQ...

Moderate: Red Hat Security Advisory: Red Hat Integration Camel Quarkus Tech-Preview 2 security update

An update to the Red Hat Integration Camel Quarkus tech preview is now available. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability...

Moderate: Red Hat Security Advisory: Red Hat Integration Camel-K 1.4 release and security update

A minor version update from 1.3 to 1.4 is now available for Red Hat Integration Camel K that includes bug fixes and enhancements. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a...

CVE-2020-29582

In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permissions...

CVE-2020-29582 vulnerabilities

Vulnerabilities for packages: thingsboard...

CVE-2020-29582

CVE-2020-29582 : In JetBrains Kotlin prior to 1.4.21, a vulnerable Java API was used for temporary file and folder creation, enabling an attacker to read data from those files and list directories due to insecure permissions. Affected product: Kotlin/JetBrains Kotlin (pre-1.4.21). Root cause: ins...