Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build tree allowing an attacker to inject modified source files into the build process.
CVSS Details
- CVSS 3.1 Base Score: 6.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade apache-ant | Jun 16, 2020 | May 14, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 14, 2020 |
| Debian | — | Upgrade ant | Jul 30, 2024 | May 14, 2020 |
| Freebsd | — | Upgrade apache-ant | Sep 29, 2020 | Sep 28, 2020 |
| Gentoo Linux | — | Upgrade dev-java/ant. | Jul 28, 2020 | May 14, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ant | Nov 3, 2020 | May 14, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ant | Sep 28, 2020 | May 14, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ant | Sep 3, 2020 | May 14, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ant-libUpgrade ant | Jul 31, 2020 | May 14, 2020 |
| Oracle Solaris | — | Upgrade developer/build/ant to version 1.10.8-11.4.24.0.1.75.1 on Solaris 11.4 | Jan 19, 2021 | May 14, 2020 |
| Redhat Openshift | — | Upgrade machine-config-daemonUpgrade conmonUpgrade openshift-ansibleUpgrade openshiftUpgrade runcUpgrade jenkinsUpgrade openshift-clients | Feb 18, 2021 | May 13, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 14, 2020 |
| Suse | — | Upgrade ant-apache-regexpUpgrade ant-junit5Upgrade ant-javamailUpgrade ant-testutilUpgrade ant-apache-bsfUpgrade ant-jdependUpgrade ant-apache-resolverUpgrade ant-apache-log4jUpgrade antUpgrade ant-apache-oroUpgrade ant-apache-bcelUpgrade ant-jmfUpgrade ant-apache-xalan2Upgrade ant-imageioUpgrade ant-manualUpgrade ant-jschUpgrade ant-swingUpgrade ant-xzUpgrade ant-scriptsUpgrade ant-junitUpgrade ant-antlrUpgrade ant-commons-loggingUpgrade ant-commons-net | Jul 21, 2020 | May 14, 2020 |
| Ubuntu | — | Upgrade ant-docUpgrade ant-optionalUpgrade antUpgrade ant (Ubuntu Pro) | Jun 2, 2020 | May 14, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 14, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub