Home > Vulnerability Database > CVE-2020-15824

Mend.io Vulnerability Database

CVE-2020-15824

Date: August 8, 2020

In JetBrains Kotlin from 1.4-M1 to 1.4-RC (as Kotlin 1.3.7x is not affected by the issue. Fixed version is 1.4.0) there is a script-cache privilege escalation vulnerability due to kotlin-main-kts cached scripts in the system temp directory, which is shared by all users by default.

Language: KOTLIN

Severity Score

8.8

Related Resources (15)

Url: https://lists.apache.org/thread.html/ra9dab34bf8625511f23692ad0fcee2725f782e9aad6c5cdff6cf4465%40%3Cnotifications.groovy.apache.org%3E

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2020-15824

Url: http://www.openwall.com/lists/oss-security/2020/12/06/1

Url: https://lists.apache.org/thread.html/ra12c3e23b021f259a201648005b9946acd7f618a6f32301c97047967@%3Cdev.groovy.apache.org%3E

Url: https://lists.apache.org/thread.html/ra9dab34bf8625511f23692ad0fcee2725f782e9aad6c5cdff6cf4465@%3Cnotifications.groovy.apache.org%3E

Url: https://lists.apache.org/thread.html/ra12c3e23b021f259a201648005b9946acd7f618a6f32301c97047967@%3Cusers.groovy.apache.org%3E

Url: https://www.oracle.com/security-alerts/cpujan2022.html

Url: https://nvd.nist.gov/vuln/detail/CVE-2020-15824

Url: https://lists.apache.org/thread.html/ra12c3e23b021f259a201648005b9946acd7f618a6f32301c97047967@%3Cannounce.apache.org%3E

Url: https://lists.apache.org/thread.html/ra12c3e23b021f259a201648005b9946acd7f618a6f32301c97047967%40%3Cusers.groovy.apache.org%3E

Url: https://blog.jetbrains.com/blog/2020/08/06/jetbrains-security-bulletin-q2-2020/

Url: https://lists.apache.org/thread.html/ra12c3e23b021f259a201648005b9946acd7f618a6f32301c97047967%40%3Cannounce.apache.org%3E

Url: https://www.oracle.com/security-alerts/cpuoct2021.html

Url: https://lists.apache.org/thread.html/ra12c3e23b021f259a201648005b9946acd7f618a6f32301c97047967%40%3Cdev.groovy.apache.org%3E

Url: https://www.mend.io/vulnerability-database/CVE-2020-15824

Severity Score

8.8

Weakness Type (CWE)

Improper Privilege Management

CWE-269

CVSS v3.1

Base Score:	8.8
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	LOW
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

CVSS v2

Base Score:	6.5
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	SINGLE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2020-15824

Date: August 8, 2020

Language: KOTLIN

Severity Score

Related Resources (15)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?