Vulnerabilities > CVE-2020-11979

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

network

low complexity

NVD

Published: 2020-10-01

Updated: 2023-11-07

Summary

As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the effort. This would still allow an attacker to inject modified source files into the build process.

Vulnerable Configurations

Part	Description	Count
Application	Apache Apache ANT 1.10.8	1
Application	Gradle Gradle Gradle - Gradle Gradle 0.1 Gradle Gradle 0.1.1 Gradle Gradle 0.1.2 Gradle Gradle 0.1.3 Gradle Gradle 0.1.4 Gradle Gradle 0.2 Gradle Gradle 0.3 Gradle Gradle 0.4 Gradle Gradle 0.5 Gradle Gradle 0.5.1 Gradle Gradle 0.5.2 Gradle Gradle 0.6 Gradle Gradle 0.6.1 Gradle Gradle 0.7 Gradle Gradle 0.8 Gradle Gradle 0.9 Gradle Gradle 0.9.1 Gradle Gradle 0.9.2 Gradle Gradle 1.0 Gradle Gradle 1.1 Gradle Gradle 1.2 Gradle Gradle 1.3 Gradle Gradle 1.3.1 Gradle Gradle 1.4 Gradle Gradle 1.5 Gradle Gradle 1.6 Gradle Gradle 1.7 Gradle Gradle 1.8 Gradle Gradle 1.9 Gradle Gradle 1.10 Gradle Gradle 1.11 Gradle Gradle 1.12 Gradle Gradle 2.0 Gradle Gradle 2.1 Gradle Gradle 2.2 Gradle Gradle 2.2.1 Gradle Gradle 2.3 Gradle Gradle 2.4 Gradle Gradle 2.5 Gradle Gradle 2.6 Gradle Gradle 2.7 Gradle Gradle 2.8 Gradle Gradle 2.9 Gradle Gradle 2.10 Gradle Gradle 2.11 Gradle Gradle 2.12 Gradle Gradle 2.13 Gradle Gradle 2.14 Gradle Gradle 2.14.1 Gradle Gradle 3.0.0 Gradle Gradle 3.1.0 Gradle Gradle 3.2.0 Gradle Gradle 3.2.1 Gradle Gradle 3.3.0 Gradle Gradle 3.4.0 Gradle Gradle 3.4.1 Gradle Gradle 3.5.0 Gradle Gradle 3.5.1 Gradle Gradle 4.0.0 Gradle Gradle 4.0.1 Gradle Gradle 4.0.2 Gradle Gradle 4.1.0 Gradle Gradle 4.2.0 Gradle Gradle 4.2.1 Gradle Gradle 4.3.0 Gradle Gradle 4.3.1 Gradle Gradle 4.4.0 Gradle Gradle 4.4.1 Gradle Gradle 4.5.0 Gradle Gradle 4.5.1 Gradle Gradle 4.6.0 Gradle Gradle 4.7.0 Gradle Gradle 4.8.0 Gradle Gradle 4.8.1 Gradle Gradle 4.9.0 Gradle Gradle 4.10.0 Gradle Gradle 4.10.1 Gradle Gradle 4.10.2 Gradle Gradle 4.10.3 Gradle Gradle 5.0.0 Gradle Gradle 5.1.0 Gradle Gradle 5.1.1 Gradle Gradle 5.2.0 Gradle Gradle 5.2.1 Gradle Gradle 5.3.0 Gradle Gradle 5.4.0 Gradle Gradle 5.4.1 Gradle Gradle 5.5.0 Gradle Gradle 5.5.1 Gradle Gradle 5.6 Gradle Gradle 5.6.0 Gradle Gradle 5.6.1 Gradle Gradle 5.6.2 Gradle Gradle 5.6.3 Gradle Gradle 5.6.4 Gradle Gradle 6.0 Gradle Gradle 6.0.0 Gradle Gradle 6.0.1 Gradle Gradle 6.1.0 Gradle Gradle 6.1.1 Gradle Gradle 6.2.0 Gradle Gradle 6.2.1 Gradle Gradle 6.2.2 Gradle Gradle 6.3.0 Gradle Gradle 6.4.0 Gradle Gradle 6.4.1 Gradle Gradle 6.5.0 Gradle Gradle 6.5.1 Gradle Gradle 6.6.0 Gradle Gradle 6.6.1 Gradle Gradle 6.7.0 Gradle Gradle 6.7.1	284
Application	Oracle Oracle Flexcube Private Banking 12.1.0 Oracle Flexcube Private Banking 12.0.0 Oracle Primavera Unifier 16.2 Oracle Primavera Unifier 16.1 Oracle Primavera Unifier 18.8 Oracle Primavera Unifier 17.7 Oracle Primavera Unifier 17.8 Oracle Primavera Unifier 17.9 Oracle Primavera Unifier 17.10 Oracle Primavera Unifier 17.11 Oracle Primavera Unifier 17.12 Oracle Primavera Unifier 19.12 Oracle Primavera Unifier 20.12 Oracle Banking Platform 2.4.0 Oracle Banking Platform 2.4.1 Oracle Banking Platform 2.6.2 Oracle Banking Platform 2.7.0 Oracle Banking Platform 2.7.1 Oracle Banking Platform 2.8.0 Oracle API Gateway 11.1.2.4.0 Oracle Enterprise Repository 11.1.1.7.0 Oracle Retail Predictive Application Server 14.1 Oracle Data Integrator 12.2.1.3.0 Oracle Data Integrator 12.2.1.4.0 Oracle Utilities Framework 4.3.0.5.0 Oracle Utilities Framework 4.3.0.6.0 Oracle Utilities Framework 4.4.0.0.0 Oracle Utilities Framework 4.4.0.2.0 Oracle Communications Unified Inventory Management 7.4.0 Oracle Communications Unified Inventory Management 7.4.1 Oracle Retail Advanced Inventory Planning 14.1 Oracle Retail Merchandising System 16.0.3 Oracle Retail Merchandising System 14.1.3.2 Oracle Agile Engineering Data Management 6.2.1.0 Oracle Primavera Gateway 16.2.0 Oracle Primavera Gateway 16.2.11 Oracle Primavera Gateway 17.12.0 Oracle Primavera Gateway 17.12.6 Oracle Primavera Gateway 17.12.7 Oracle Primavera Gateway 17.12.8 Oracle Primavera Gateway 17.12.9 Oracle Retail Store Inventory Management 15.0.3.0 Oracle Retail Store Inventory Management 16.0.3.0 Oracle Retail Store Inventory Management 14.1.3.9 Oracle Retail Service Backbone 15.0.3 Oracle Retail Service Backbone 16.0.3 Oracle Retail Service Backbone 14.1.3 Oracle Retail Financial Integration 15.0.3 Oracle Retail Financial Integration 16.0.3 Oracle Retail Financial Integration 14.1.3 Oracle Retail Integration BUS 15.0.3 Oracle Retail Xstore Point OF Service 16.0.6 Oracle Retail Xstore Point OF Service 17.0.4 Oracle Retail Xstore Point OF Service 18.0.3 Oracle Retail Xstore Point OF Service 19.0.2 Oracle Retail Xstore Point OF Service 15.0.4 Oracle Real Time Decision Server 3.2.0.0 Oracle Real Time Decision Server 11.1.1.9.0 Oracle Financial Services Analytical Applications Infrastructure 8.1.1 Oracle Financial Services Analytical Applications Infrastructure 8.1.0 Oracle Financial Services Analytical Applications Infrastructure 8.0.6 Oracle Financial Services Analytical Applications Infrastructure 8.0.6.0.0 Oracle Financial Services Analytical Applications Infrastructure 8.0.6.0.1 Oracle Financial Services Analytical Applications Infrastructure 8.0.6.1.0 Oracle Financial Services Analytical Applications Infrastructure 8.0.6.2.0 Oracle Financial Services Analytical Applications Infrastructure 8.0.6.3.0 Oracle Financial Services Analytical Applications Infrastructure 8.0.6.4.0 Oracle Financial Services Analytical Applications Infrastructure 8.0.7 Oracle Financial Services Analytical Applications Infrastructure 8.0.7.0.0 Oracle Financial Services Analytical Applications Infrastructure 8.0.7.1.0 Oracle Financial Services Analytical Applications Infrastructure 8.0.7.2.0 Oracle Financial Services Analytical Applications Infrastructure 8.0.8 Oracle Financial Services Analytical Applications Infrastructure 8.0.8.0.0 Oracle Financial Services Analytical Applications Infrastructure 8.0.9 Oracle Retail Eftlink 19.0.1 Oracle Retail Eftlink 20.0.0 Oracle Endeca Information Discovery Studio 3.2.0.0 Oracle Banking Treasury Management 14.4 Oracle Retail Regular Price Optimization 16.0.3 Oracle Retail Assortment Planning 16.0.3 Oracle Retail Size Profile Optimization 16.0.3 Oracle Retail Replenishment Optimization 16.0.3 Oracle Retail Merchandise Financial Planning 16.0.3 Oracle Retail Macro Space Optimization 16.0.3 Oracle Retail Item Planning 16.0.3 Oracle Retail Category Management Planning & Optimization 16.0.3 Oracle Timesten IN Memory Database - Oracle Storagetek Acsls 8.5.1 Oracle Storagetek Tape Analytics 2.4	89
OS	Fedoraproject Fedoraproject Fedora 31 Fedoraproject Fedora 32 Fedoraproject Fedora 33	3

Vulnerabilities > CVE-2020-11979 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2020-11979"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2020-11979