CVE-2020-15824: High severity kotlin vulnerability
Published Aug 8, 2020
·Updated
In JetBrains Kotlin from 1.4-M1 to 1.4-RC (as Kotlin 1.3.7x is not affected by the issue. Fixed version is 1.4.0) there is a script-cache privilege escalation vulnerability due to kotlin-main-kts cached scripts in the system temp directory, which is shared by all users by default.
Affected Software
8 affected components
JetBrains Kotlin=1.4.0-milestone1
JetBrains Kotlin=1.4.0-milestone2
JetBrains Kotlin=1.4.0-milestone3
JetBrains Kotlin=1.4.0-rc
Oracle Banking Extensibility Workbench=14.2
Oracle Banking Extensibility Workbench=14.3
Oracle Banking Extensibility Workbench=14.5
Oracle Communications Cloud Native Core Policy=1.14.0
Remediation
Patch Available
Patch Available
Event History
Aug 8, 2020
CVE Published
via MITRE·08:21 PM
Data Sourced
via MITRE·08:21 PM
Description