CVE-2020-29582

Description

In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permissions.

Risk Information

Base Score

5.3

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS Score

Exploitation Probability

0.005

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2020-29582 are fixed in JetBrains-kotlin-stdlib 1.4.21	Windows
Multiple Vulnerabilities are affected in IBM Planning Analytics Local 2.0	Windows
Vulnerabilities CVE-2020-29582 are fixed in JetBrains-kotlin-stdlib for Linux 1.4.21	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234