PT-2020-14653 · Jetbrains · Kotlin

Published 2020-08-08 · Updated 2022-03-03 · CVE-2020-15824

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions JetBrains Kotlin versions 1.4-M1 through 1.4-RC

Description The issue is related to a script-cache privilege escalation due to kotlin-main-kts cached scripts in the system temp directory, which is shared by all users by default. This is caused by the caching of scripts in a shared directory.

Recommendations For versions 1.4-M1 through 1.4-RC, update to version 1.4.0 to resolve the issue. As a temporary workaround, consider restricting access to the system temp directory to minimize the risk of exploitation.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2020-15824

Affected Products

Kotlin

References · 15

• https://oracle.com/security-alerts/cpujan2022.html · Patch
• https://ubuntu.com/security/CVE-2020-15824 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-15824 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15824 · Security Note
• https://blog.jetbrains.com/blog/2020/08/06/jetbrains-security-bulletin-q2-2020 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-15824 · Vendor Advisory
• https://oracle.com/security-alerts/cpuoct2021.html · Patch
• https://cve.org/CVERecord?id=CVE-2020-15824 · Security Note
• https://lists.apache.org/thread.html/ra12c3e23b021f259a201648005b9946acd7f618a6f32301c97047967%40%3Cannounce.apache.org%3E · Note
• https://t.me/cvenotify/6639 · Telegram Post
• https://lists.apache.org/thread.html/ra9dab34bf8625511f23692ad0fcee2725f782e9aad6c5cdff6cf4465%40%3Cnotifications.groovy.apache.org%3E · Note
• https://t.me/cvenotify/27706 · Telegram Post
• http://openwall.com/lists/oss-security/2020/12/06/1 · Note
• https://lists.apache.org/thread.html/ra12c3e23b021f259a201648005b9946acd7f618a6f32301c97047967%40%3Cusers.groovy.apache.org%3E · Note
• https://lists.apache.org/thread.html/ra12c3e23b021f259a201648005b9946acd7f618a6f32301c97047967%40%3Cdev.groovy.apache.org%3E · Note