CVE-2020-15824
High
Description
In JetBrains Kotlin from 1.4-M1 to 1.4-RC (as Kotlin 1.3.7x is not affected by the issue. Fixed version is 1.4.0) there is a script-cache privilege escalation vulnerability due to kotlin-main-kts cached scripts in the system temp directory, which is shared by all users by default.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Jetbrains Kotlin
PublishedAug 8, 2020
First seenAug 8, 2020
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jetbrains kotlin | 1.4.0 | — |
| oracle banking_extensibility_workbench | 14.2, 14.3, 14.5 | — |
| oracle communications_cloud_native_core_policy | 1.14.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.