SB2020101219 - Information disclosure in JUnit

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2020101219

SB2020101219 - Information disclosure in JUnit

Published: October 12, 2020 Updated: January 7, 2021

Security Bulletin ID SB2020101219
Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Information disclosure

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Insecure Temporary File (CVE-ID: CVE-2020-15250)

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to the application is using the test rule TemporaryFolder that stores sensitive information in temporary files in the system temporary directory, accessible by other system users. A local user can read temporary files and obtain sensitive information, related to the application.


Remediation

Install update from vendor's website.

References