CVE-2020-15824
08.08.2020, 21:15
In JetBrains Kotlin from 1.4-M1 to 1.4-RC (as Kotlin 1.3.7x is not affected by the issue. Fixed version is 1.4.0) there is a script-cache privilege escalation vulnerability due to kotlin-main-kts cached scripts in the system temp directory, which is shared by all users by default.Enginsight
| Vendor | Product | Version |
|---|---|---|
| jetbrains | kotlin | 1.4.0:milestone1 |
| jetbrains | kotlin | 1.4.0:milestone2 |
| jetbrains | kotlin | 1.4.0:milestone3 |
| jetbrains | kotlin | 1.4.0:rc |
| oracle | banking_extensibility_workbench | 14.2 |
| oracle | banking_extensibility_workbench | 14.3 |
| oracle | banking_extensibility_workbench | 14.5 |
| oracle | communications_cloud_native_core_policy | 1.14.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References