CVE-2018-25068
Description
A vulnerability has been found in devent globalpom-utils up to 4.5.0 and classified as critical. This vulnerability affects the function createTmpDir of the file globalpomutils-fileresources/src/main/java/com/anrisoftware/globalpom/fileresourcemanager/FileResourceManagerProvider.java. The manipulation leads to insecure temporary file. The attack can be initiated remotely. Upgrading to version 4.5.1 is able to address this issue. The patch is identified as 77a820bac2f68e662ce261ecb050c643bd7ee560. It is recommended to upgrade the affected component. VDB-217570 is the identifier assigned to this vulnerability.
How to fix
- globalpom-utils_project globalpom-utils4.5.1 or later
- com.anrisoftware.globalpom:globalpomutils4.5.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| globalpom-utils_project globalpom-utils | v < 4.5.1 | 4.5.1 |
| com.anrisoftware.globalpom:globalpomutilsMaven | v < 4.5.1 | 4.5.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.