vulnerability

Gentoo Linux: CVE-2020-1945: Apache Ant: Multiple vulnerabilities

Severity
3
CVSS
(AV:L/AC:M/Au:N/C:P/I:P/A:N)
Published
May 14, 2020
Added
Jul 28, 2020
Modified
Aug 13, 2025

Description

Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build tree allowing an attacker to inject modified source files into the build process.

Solution

gentoo-linux-upgrade-dev-java-ant
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.