Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build tree allowing an attacker to inject modified source files into the build process.
CVSS Details
- CVSS 3.1 Base Score: 6.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade apache-ant | Jun 16, 2020 | May 14, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 14, 2020 |
| Debian | — | Upgrade ant | Jul 30, 2024 | May 14, 2020 |
| Freebsd | — | Upgrade apache-ant | Sep 29, 2020 | Sep 28, 2020 |
| Gentoo Linux | — | Upgrade dev-java/ant. | Jul 28, 2020 | May 14, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ant | Nov 3, 2020 | May 14, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ant | Sep 28, 2020 | May 14, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ant | Sep 3, 2020 | May 14, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ant-libUpgrade ant | Jul 31, 2020 | May 14, 2020 |
| Oracle Solaris | — | Upgrade developer/build/ant to version 1.10.8-11.4.24.0.1.75.1 on Solaris 11.4 | Jan 19, 2021 | May 14, 2020 |
| Redhat Openshift | — | Upgrade openshift-ansibleUpgrade jenkinsUpgrade openshiftUpgrade openshift-clientsUpgrade runcUpgrade machine-config-daemonUpgrade conmon | Feb 18, 2021 | May 13, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 14, 2020 |
| Suse | — | Upgrade ant-junitUpgrade ant-commons-netUpgrade ant-xzUpgrade ant-jmfUpgrade ant-commons-loggingUpgrade ant-swingUpgrade ant-scriptsUpgrade ant-antlrUpgrade ant-jschUpgrade ant-manualUpgrade ant-imageioUpgrade ant-apache-xalan2Upgrade ant-junit5Upgrade ant-testutilUpgrade antUpgrade ant-jdependUpgrade ant-apache-oroUpgrade ant-apache-regexpUpgrade ant-javamailUpgrade ant-apache-resolverUpgrade ant-apache-bsfUpgrade ant-apache-bcelUpgrade ant-apache-log4j | Jul 21, 2020 | May 14, 2020 |
| Ubuntu | — | Upgrade ant (Ubuntu Pro)Upgrade antUpgrade ant-optionalUpgrade ant-doc | Jun 2, 2020 | May 14, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 14, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub