CVE-2020-29582 in Communications User Data Repository

요약

\~에 의해 MITRE • 2021. 02. 03.

In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permissions.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• 예약하다: 2020. 12. 06.
• 공개: 2021. 02. 03.
• 모더레이션: 수락
• 항목: 5
• 연결하다: 보여 주다
• CPE: 준비됨
• CWE: CWE-200 (확인됨)
• CVSS: 5.3 (NVD)
• EPSS: 0.00004
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Industry, Chemical, ...

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-29582
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-29582
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-29582/