CVE-2020-29582 - CVE House
Back to Database
Status published Medium CVE-2020-29582

In JetBrains Kotlin before 1.4.21, a vulnerable Java API was...

Vulnerability Description

In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permissions.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-29582

Credits & Attribution

No credits recorded in the NVD database.

References

More from jetbrains

View All →
CVE-2022-25264
In JetBrains TeamCity before 2021.2.3, environment variables of the "password"...
High 7.5
CVE-2022-25263
JetBrains TeamCity before 2021.2.3 was vulnerable to OS command injection...
Critical 9.8
CVE-2022-25262
In JetBrains Hub before 2022.1.14434, SAML request takeover was possible....
Critical 9.8
CVE-2022-25261
JetBrains TeamCity before 2021.2.2 was vulnerable to reflected XSS....
Medium 6.1
CVE-2022-25260
JetBrains Hub before 2021.1.14276 was vulnerable to blind Server-Side Request...
Critical 9.1

Affected Vendor

Affected Software

kotlin, communications cloud native core network slice selection function, communications cloud native core policy, communications cloud native core service communication proxy
Vulnerable Versions:
0, 1.2.1, 1.14.0

Timeline

Official Publish: February 3rd, 2021
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.