Medium severity · published May 14, 2020
CVE-2020-1945
Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak…
6.3
CVSS
1.8%
EPSS
No
On KEV
Description
Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build tree allowing an attacker to inject modified source files into the build process.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack vector
Local
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AE
Agile Engineering Data Management · Oracle
6.2.1.0 · source: NVD
AN
Ant · Apache
1.1 through 1.9.14; 1.10.0 through 1.10.7 · source: NVD
BE
Banking Enterprise Collections · Oracle
2.7.0 through 2.9.0 · source: NVD
BL
Banking Liquidity Management · Oracle
14.0.0 through 14.4.0 · source: NVD
BP
Banking Platform · Oracle
2.4.0 through 2.9.0 · source: NVD
BP
Business Process Management Suite · Oracle
12.2.1.3.0; 12.2.1.4.0 · source: NVD
CM
Category Management Planning & Optimization · Oracle
15.0.3 · source: NVD
CA
Communications Asap · Oracle
7.3 · source: NVD
CD
Communications Diameter Signaling Router · Oracle
8.0.0 through 8.2.2 · source: NVD
CM
Communications Metasolv Solution · Oracle
6.3.0 · source: NVD
CO
Communications Order And Service Management · Oracle
7.3; 7.4 · source: NVD
DI
Data Integrator · Oracle
12.2.1.3.0; 12.2.1.4.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-1945
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-1945
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00053.html
Mailing List
http://www.openwall.com/lists/oss-security/2020/09/30/6
Mailing List
http://www.openwall.com/lists/oss-security/2020/12/06/1
lists.apache.org
https://lists.apache.org/thread.html/r0d08a96ba9de8aa435f32944e8b2867c368a518d4ff57782e3637335%40%3Cissues.hive.apache.org%3E
lists.apache.org
https://lists.apache.org/thread.html/r107ea1b1a7a214bc72fe1a04207546ccef542146ae22952e1013b5cc%40%3Cdev.creadur.apache.org%3E
lists.apache.org
https://lists.apache.org/thread.html/r1863b9ce4c3e4b1e5b0c671ad05545ba3eb8399616aa746af5dfe1b1%40%3Cdev.creadur.apache.org%3E
More from Ant
7.5
CVE-2020-11979
As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them
7.4
CVE-2026-78254
Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write
5.5
CVE-2021-36374
When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even…
5.5
CVE-2021-36373
When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small…