Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build tree allowing an attacker to inject modified source files into the build process.
CVSS Details
- CVSS 3.1 Base Score: 6.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade apache-ant | Jun 16, 2020 | May 14, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 14, 2020 |
| Debian | — | Upgrade ant | Jul 30, 2024 | May 14, 2020 |
| Freebsd | — | Upgrade apache-ant | Sep 29, 2020 | Sep 28, 2020 |
| Gentoo Linux | — | Upgrade dev-java/ant. | Jul 28, 2020 | May 14, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ant | Nov 3, 2020 | May 14, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ant | Sep 28, 2020 | May 14, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ant | Sep 3, 2020 | May 14, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ant-libUpgrade ant | Jul 31, 2020 | May 14, 2020 |
| Oracle Solaris | — | Upgrade developer/build/ant to version 1.10.8-11.4.24.0.1.75.1 on Solaris 11.4 | Jan 19, 2021 | May 14, 2020 |
| Redhat Openshift | — | Upgrade conmonUpgrade machine-config-daemonUpgrade openshift-ansibleUpgrade openshift-clientsUpgrade runcUpgrade jenkinsUpgrade openshift | Feb 18, 2021 | May 13, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 14, 2020 |
| Suse | — | Upgrade ant-swingUpgrade ant-antlrUpgrade ant-commons-loggingUpgrade ant-imageioUpgrade ant-scriptsUpgrade ant-jschUpgrade ant-apache-xalan2Upgrade ant-junitUpgrade ant-xzUpgrade ant-commons-netUpgrade ant-jmfUpgrade ant-manualUpgrade ant-apache-regexpUpgrade ant-apache-bcelUpgrade ant-apache-log4jUpgrade antUpgrade ant-javamailUpgrade ant-jdependUpgrade ant-apache-bsfUpgrade ant-junit5Upgrade ant-apache-resolverUpgrade ant-testutilUpgrade ant-apache-oro | Jul 21, 2020 | May 14, 2020 |
| Ubuntu | — | Upgrade ant-optionalUpgrade antUpgrade ant (Ubuntu Pro)Upgrade ant-doc | Jun 2, 2020 | May 14, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 14, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub