CVE-2020-11979

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-11979
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-11979.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2020-11979
Aliases
Downstream
Related
Published
2020-10-01T20:15:13.033Z
Modified
2026-05-15T12:14:10.052773107Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the effort. This would still allow an attacker to inject modified source files into the build process.

Database specific 
{
    "unresolved_ranges": [
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
                "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
                "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*"
            ],
            "vendor_product": "fedoraproject:fedora",
            "extracted_events": [
                {
                    "last_affected": "31"
                },
                {
                    "last_affected": "32"
                },
                {
                    "last_affected": "33"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:agile_engineering_data_management:6.2.1.0:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:agile_engineering_data_management",
            "extracted_events": [
                {
                    "last_affected": "6.2.1.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:api_gateway:11.1.2.4.0:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:api_gateway",
            "extracted_events": [
                {
                    "last_affected": "11.1.2.4.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:banking_platform:2.4.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:banking_platform:2.4.1:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:banking_platform:2.6.2:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:banking_platform:2.7.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:banking_platform:2.7.1:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:banking_platform:2.8.0:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:banking_platform",
            "extracted_events": [
                {
                    "last_affected": "2.4.0"
                },
                {
                    "last_affected": "2.4.1"
                },
                {
                    "last_affected": "2.6.2"
                },
                {
                    "last_affected": "2.7.0"
                },
                {
                    "last_affected": "2.7.1"
                },
                {
                    "last_affected": "2.8.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:banking_treasury_management:14.4:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:banking_treasury_management",
            "extracted_events": [
                {
                    "last_affected": "14.4"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.1:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:communications_unified_inventory_management",
            "extracted_events": [
                {
                    "last_affected": "7.4.0"
                },
                {
                    "last_affected": "7.4.1"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:data_integrator:12.2.1.3.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:data_integrator:12.2.1.4.0:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:data_integrator",
            "extracted_events": [
                {
                    "last_affected": "12.2.1.3.0"
                },
                {
                    "last_affected": "12.2.1.4.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:endeca_information_discovery_studio:3.2.0.0:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:endeca_information_discovery_studio",
            "extracted_events": [
                {
                    "last_affected": "3.2.0.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:enterprise_repository:11.1.1.7.0:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:enterprise_repository",
            "extracted_events": [
                {
                    "last_affected": "11.1.1.7.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.1.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.1.1:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:financial_services_analytical_applications_infrastructure",
            "extracted_events": [
                {
                    "introduced": "8.0.6"
                },
                {
                    "last_affected": "8.0.9"
                },
                {
                    "last_affected": "8.1.0"
                },
                {
                    "last_affected": "8.1.1"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:flexcube_private_banking:12.0.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:flexcube_private_banking:12.1.0:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:flexcube_private_banking",
            "extracted_events": [
                {
                    "last_affected": "12.0.0"
                },
                {
                    "last_affected": "12.1.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:primavera_gateway",
            "extracted_events": [
                {
                    "introduced": "16.2.0"
                },
                {
                    "last_affected": "16.2.11"
                },
                {
                    "introduced": "17.12.0"
                },
                {
                    "last_affected": "17.12.9"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:primavera_unifier:20.12:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:primavera_unifier",
            "extracted_events": [
                {
                    "introduced": "17.7"
                },
                {
                    "last_affected": "17.12"
                },
                {
                    "last_affected": "16.1"
                },
                {
                    "last_affected": "16.2"
                },
                {
                    "last_affected": "18.8"
                },
                {
                    "last_affected": "19.12"
                },
                {
                    "last_affected": "20.12"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:real-time_decision_server:11.1.1.9.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:real-time_decision_server:3.2.0.0:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:real-time_decision_server",
            "extracted_events": [
                {
                    "last_affected": "3.2.0.0"
                },
                {
                    "last_affected": "11.1.1.9.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:retail_advanced_inventory_planning:14.1:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:retail_advanced_inventory_planning",
            "extracted_events": [
                {
                    "last_affected": "14.1"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:retail_assortment_planning:16.0.3:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:retail_assortment_planning",
            "extracted_events": [
                {
                    "last_affected": "16.0.3"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:retail_category_management_planning_\\&_optimization:16.0.3:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:retail_category_management_planning_&_optimization",
            "extracted_events": [
                {
                    "last_affected": "16.0.3"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:retail_eftlink:19.0.1:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:retail_eftlink:20.0.0:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:retail_eftlink",
            "extracted_events": [
                {
                    "last_affected": "19.0.1"
                },
                {
                    "last_affected": "20.0.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:retail_financial_integration:14.1.3:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:retail_financial_integration:15.0.3:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:retail_financial_integration:16.0.3:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:retail_financial_integration",
            "extracted_events": [
                {
                    "last_affected": "14.1.3"
                },
                {
                    "last_affected": "15.0.3"
                },
                {
                    "last_affected": "16.0.3"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:retail_integration_bus:15.0.3:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:retail_integration_bus",
            "extracted_events": [
                {
                    "last_affected": "15.0.3"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:retail_item_planning:16.0.3:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:retail_item_planning",
            "extracted_events": [
                {
                    "last_affected": "16.0.3"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:retail_macro_space_optimization:16.0.3:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:retail_macro_space_optimization",
            "extracted_events": [
                {
                    "last_affected": "16.0.3"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:retail_merchandise_financial_planning:16.0.3:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:retail_merchandise_financial_planning",
            "extracted_events": [
                {
                    "last_affected": "16.0.3"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:retail_merchandising_system:14.1.3.2:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:retail_merchandising_system:16.0.3:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:retail_merchandising_system",
            "extracted_events": [
                {
                    "last_affected": "14.1.3.2"
                },
                {
                    "last_affected": "16.0.3"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:retail_predictive_application_server:14.1:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:retail_predictive_application_server",
            "extracted_events": [
                {
                    "last_affected": "14.1"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:retail_regular_price_optimization:16.0.3:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:retail_regular_price_optimization",
            "extracted_events": [
                {
                    "last_affected": "16.0.3"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:retail_replenishment_optimization:16.0.3:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:retail_replenishment_optimization",
            "extracted_events": [
                {
                    "last_affected": "16.0.3"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:retail_service_backbone:14.1.3:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:retail_service_backbone:15.0.3:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:retail_service_backbone:16.0.3:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:retail_service_backbone",
            "extracted_events": [
                {
                    "last_affected": "14.1.3"
                },
                {
                    "last_affected": "15.0.3"
                },
                {
                    "last_affected": "16.0.3"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:retail_size_profile_optimization:16.0.3:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:retail_size_profile_optimization",
            "extracted_events": [
                {
                    "last_affected": "16.0.3"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:retail_store_inventory_management:14.1.3.9:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:retail_store_inventory_management:15.0.3.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:retail_store_inventory_management:16.0.3.0:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:retail_store_inventory_management",
            "extracted_events": [
                {
                    "last_affected": "14.1.3.9"
                },
                {
                    "last_affected": "15.0.3.0"
                },
                {
                    "last_affected": "16.0.3.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0.4:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:retail_xstore_point_of_service",
            "extracted_events": [
                {
                    "last_affected": "15.0.4"
                },
                {
                    "last_affected": "16.0.6"
                },
                {
                    "last_affected": "17.0.4"
                },
                {
                    "last_affected": "18.0.3"
                },
                {
                    "last_affected": "19.0.2"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:storagetek_acsls:8.5.1:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:storagetek_acsls",
            "extracted_events": [
                {
                    "last_affected": "8.5.1"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:storagetek_tape_analytics:2.4:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:storagetek_tape_analytics",
            "extracted_events": [
                {
                    "last_affected": "2.4"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:timesten_in-memory_database:*:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:timesten_in-memory_database",
            "extracted_events": [
                {
                    "fixed": "11.2.2.8.27"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:oracle:utilities_framework:4.3.0.5.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:utilities_framework:4.3.0.6.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:utilities_framework:4.4.0.0.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:utilities_framework:4.4.0.2.0:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:utilities_framework",
            "extracted_events": [
                {
                    "last_affected": "4.3.0.5.0"
                },
                {
                    "last_affected": "4.3.0.6.0"
                },
                {
                    "last_affected": "4.4.0.0.0"
                },
                {
                    "last_affected": "4.4.0.2.0"
                }
            ]
        }
    ]
}
References

Affected packages