Vulnerability in Apache Ant
CVE-2020-11979
As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the effort. This would still allow an attacker to inject modified source files into the build process.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.
EPSS exploit prediction
EPSS: 0.078 (94.6th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 95th percentile — 94.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.080 · newest: 0.078 · change: -0.003
Affected products
- Apache Ant — versions 1.10.8
- Gradle
- Oracle Agile Engineering Data Management — versions 6.2.1.0
- Oracle API Gateway — versions 11.1.2.4.0
- Oracle Banking Platform — versions 2.4.0, 2.4.1, 2.6.2
- Oracle Banking Treasury Management — versions 14.4
- Oracle Communications Unified Inventory Management — versions 7.4.0, 7.4.1
- Oracle Data Integrator — versions 12.2.1.3.0, 12.2.1.4.0
- Oracle Endeca Information Discovery Studio — versions 3.2.0.0
- Oracle Enterprise Repository — versions 11.1.1.7.0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- lists.apache.org/thread.html/rc3c8ef9724b5b1e171529b47f4b35cb7920edfb6e917fa21e… (Mailing List, Vendor Advisory)
- lists.apache.org/thread.html/r1dc8518dc99c42ecca5ff82d0d2de64cd5d3a4fa691eb9ee0… (mailing-list)
- lists.apache.org/thread.html/r4ca33fad3fb39d130cda287d5a60727d9e706e6f2cf2339b9… (mailing-list)
- lists.apache.org/thread.html/r107ea1b1a7a214bc72fe1a04207546ccef542146ae22952e1… (mailing-list)
- lists.apache.org/thread.html/r2306b67f20c24942b872b0a41fbdc9330e8467388158bcd19… (mailing-list)
- lists.apache.org/thread.html/r5e1cdd79f019162f76414708b2092acad0a6703d666d72d71… (mailing-list)
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/… (vendor-advisory)
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/… (vendor-advisory)
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/… (vendor-advisory)
- security.gentoo.org/glsa/202011-18 (vendor-advisory, Third Party Advisory)
Frequently asked questions
- What is CVE-2020-11979?
- CVE-2020-11979 is a high-severity vulnerability in Apache Ant, classified under Creation of Temporary File in Directory with Insecure Permissions. CVSS score: 7.5/10. Published 2020-10-01.
- How severe is CVE-2020-11979?
- High severity. CVSS v3 base score is 7.5 out of 10.
- Is CVE-2020-11979 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.