Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build tree allowing an attacker to inject modified source files into the build process.
CVSS Details
- CVSS 3.1 Base Score: 6.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade apache-ant | Jun 16, 2020 | May 14, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 14, 2020 |
| Debian | — | Upgrade ant | Jul 30, 2024 | May 14, 2020 |
| Freebsd | — | Upgrade apache-ant | Sep 29, 2020 | Sep 28, 2020 |
| Gentoo Linux | — | Upgrade dev-java/ant. | Jul 28, 2020 | May 14, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ant | Nov 3, 2020 | May 14, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ant | Sep 28, 2020 | May 14, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ant | Sep 3, 2020 | May 14, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade antUpgrade ant-lib | Jul 31, 2020 | May 14, 2020 |
| Oracle Solaris | — | Upgrade developer/build/ant to version 1.10.8-11.4.24.0.1.75.1 on Solaris 11.4 | Jan 19, 2021 | May 14, 2020 |
| Redhat Openshift | — | Upgrade runcUpgrade openshift-clientsUpgrade jenkinsUpgrade openshiftUpgrade openshift-ansibleUpgrade machine-config-daemonUpgrade conmon | Feb 18, 2021 | May 13, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 14, 2020 |
| Suse | — | Upgrade ant-javamailUpgrade ant-apache-oroUpgrade ant-junit5Upgrade ant-apache-bcelUpgrade ant-apache-log4jUpgrade ant-jdependUpgrade ant-apache-bsfUpgrade ant-apache-regexpUpgrade ant-apache-resolverUpgrade ant-testutilUpgrade antUpgrade ant-commons-netUpgrade ant-swingUpgrade ant-junitUpgrade ant-antlrUpgrade ant-apache-xalan2Upgrade ant-xzUpgrade ant-imageioUpgrade ant-scriptsUpgrade ant-commons-loggingUpgrade ant-jmfUpgrade ant-jschUpgrade ant-manual | Jul 21, 2020 | May 14, 2020 |
| Ubuntu | — | Upgrade ant-docUpgrade antUpgrade ant-optionalUpgrade ant (Ubuntu Pro) | Jun 2, 2020 | May 14, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 14, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub