imPC@ndo EN

Tracker / CVE-2020-1945

CVE-2020-1945

Media 6.3

Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build tree allowing an attacker to inject modified source files into the build process.

Prodotti e versioni affette

apache ant · 1.1 → 1.9.14
apache ant · 1.10.0 → 1.10.7
canonical ubuntu_linux
fedoraproject fedora
opensuse leap
oracle agile_engineering_data_management
oracle banking_enterprise_collections · 2.7.0 → 2.9.0
oracle banking_liquidity_management · 14.0.0 → 14.4.0
oracle banking_platform · 2.4.0 → 2.9.0
oracle business_process_management_suite
oracle category_management_planning_\&_optimization
oracle communications_asap
oracle communications_diameter_signaling_router · 8.0.0 → 8.2.2
oracle communications_metasolv_solution
oracle communications_order_and_service_management
oracle data_integrator
oracle endeca_information_discovery_studio
oracle enterprise_manager_ops_center
oracle enterprise_repository
oracle financial_services_analytical_applications_infrastructure · 8.0.6 → 8.1.0
oracle flexcube_investor_servicing
oracle flexcube_private_banking
oracle health_sciences_information_manager · 3.0 → 3.0.2
oracle primavera_gateway · 16.2.0 → 16.2.11
oracle primavera_gateway · 17.12.0 → 17.12.7
oracle primavera_unifier
oracle primavera_unifier · 17.7 → 17.12
oracle rapid_planning
oracle real-time_decision_server
oracle retail_advanced_inventory_planning
oracle retail_assortment_planning
oracle retail_back_office
oracle retail_bulk_data_integration
oracle retail_central_office
oracle retail_data_extractor_for_merchandising
oracle retail_extract_transform_and_load
oracle retail_financial_integration
oracle retail_integration_bus
oracle retail_item_planning
oracle retail_macro_space_optimization
oracle retail_merchandise_financial_planning
oracle retail_merchandising_system
oracle retail_point-of-service
oracle retail_predictive_application_server
oracle retail_regular_price_optimization
oracle retail_replenishment_optimization
oracle retail_returns_management
oracle retail_service_backbone
oracle retail_size_profile_optimization
oracle retail_store_inventory_management
oracle retail_xstore_point_of_service
oracle timesten_in-memory_database
oracle timesten_in-memory_database · … → 11.2.2.8.27
oracle utilities_framework
oracle utilities_framework · 4.3.0.1.0 → 4.3.0.6.0

Analisi

Questa pagina non è ancora indicizzabile.Finché non contiene un’analisi originale — cosa espone davvero, come verificare in due minuti se un sistema è stato toccato, cosa fare se lo è stato — la pagina resta noindex. È il database a deciderlo, non il modello di pagina.

Riferimenti