CVE-2020-29582: Medium severity JetBrains Kotlin vulnerability
In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permissions.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2020-29582?
CVE-2020-29582 is a vulnerability in JetBrains Kotlin before version 1.4.21 that allows an attacker to read data from temporary files and list directories due to insecure permissions.
What is the severity of CVE-2020-29582?
CVE-2020-29582 has a severity score of 5.3, which is considered medium.
How can I fix CVE-2020-29582?
To fix CVE-2020-29582, update JetBrains Kotlin to version 1.4.21 or higher.
Where can I find more information about CVE-2020-29582?
You can find more information about CVE-2020-29582 at the following references: [CVE.org](https://www.cve.org/CVERecord?id=CVE-2020-29582), [NVD](https://nvd.nist.gov/vuln/detail/CVE-2020-29582), [JetBrains Security Bulletin](https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/), [Red Hat Bugzilla](https://bugzilla.redhat.com/show_bug.cgi?id=1930291), [Red Hat Errata](https://access.redhat.com/errata/RHSA-2021:3205).
What is the Common Weakness Enumeration (CWE) for CVE-2020-29582?
The Common Weakness Enumeration (CWE) for CVE-2020-29582 is CWE-276.