CVE-2020-27216

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-27216
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-27216.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-27216
Aliases
Downstream
CGA (8)
CLSA (2)
DEBIAN (1)
OESA (1)
RHSA (4)
UBUNTU (1)
Related
Published
2020-10-23T13:15:16Z
Modified
2026-09-06T03:45:27Z
Severity
  • 7.0 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub directory in the shared temporary directory and race to complete the creation of the temporary subdirectory. If the attacker wins the race then they will have read and write permission to the subdirectory used to unpack web applications, including their WEB-INF/lib jar files and JSP files. If any code is ever executed out of this temporary directory, this can lead to a local privilege escalation vulnerability.

Database specific 
{
    "unresolved_ranges":  [
        {
            "cpes":  [
                "cpe:2.3:a:netapp:storage_replication_adapter:*:*:*:*:*:clustered_data_ontap:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "7.2"
                }
            ],
            "source":  "CPE_RANGE",
            "vendor_product":  "netapp:storage_replication_adapter"
        },
        {
            "cpes":  [
                "cpe:2.3:a:netapp:vasa_provider:*:*:*:*:*:clustered_data_ontap:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "7.2"
                }
            ],
            "source":  "CPE_RANGE",
            "vendor_product":  "netapp:vasa_provider"
        },
        {
            "cpes":  [
                "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "7.2"
                }
            ],
            "source":  "CPE_RANGE",
            "vendor_product":  "netapp:virtual_storage_console"
        },
        {
            "cpes":  [
                "cpe:2.3:a:oracle:communications_element_manager:*:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "8.2.1"
                },
                {
                    "last_affected":  "8.2.2.1"
                }
            ],
            "source":  "CPE_RANGE",
            "vendor_product":  "oracle:communications_element_manager"
        },
        {
            "cpes":  [
                "cpe:2.3:a:oracle:flexcube_core_banking:*:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "11.5.0"
                },
                {
                    "last_affected":  "11.9.0"
                }
            ],
            "source":  "CPE_RANGE",
            "vendor_product":  "oracle:flexcube_core_banking"
        },
        {
            "cpes":  [
                "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "fixed":  "9.2.6.0"
                }
            ],
            "source":  "CPE_RANGE",
            "vendor_product":  "oracle:jd_edwards_enterpriseone_tools"
        },
        {
            "cpes":  [
                "cpe:2.3:a:oracle:siebel_core_-_automation:*:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "last_affected":  "21.5"
                }
            ],
            "source":  "CPE_RANGE",
            "vendor_product":  "oracle:siebel_core_-_automation"
        },
        {
            "cpes":  [
                "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "9.0"
                },
                {
                    "last_affected":  "9.0"
                },
                {
                    "introduced":  "10.0"
                },
                {
                    "last_affected":  "10.0"
                }
            ],
            "source":  "CPE_STRING",
            "vendor_product":  "debian:debian_linux"
        },
        {
            "cpes":  [
                "cpe:2.3:a:eclipse:jetty:11.0.0:alpha1:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "11.0.0-alpha1"
                },
                {
                    "last_affected":  "11.0.0-alpha1"
                },
                {
                    "introduced":  "11.0.0-alpha1"
                },
                {
                    "last_affected":  "11.0.0-alpha1"
                },
                {
                    "introduced":  "11.0.0-alpha1"
                },
                {
                    "last_affected":  "11.0.0-alpha1"
                }
            ],
            "source":  "CPE_STRING",
            "vendor_product":  "eclipse:jetty"
        },
        {
            "cpes":  [
                "cpe:2.3:a:oracle:communications_application_session_controller:3.9m0p2:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "3.9m0p2"
                },
                {
                    "last_affected":  "3.9m0p2"
                }
            ],
            "source":  "CPE_STRING",
            "vendor_product":  "oracle:communications_application_session_controller"
        },
        {
            "cpes":  [
                "cpe:2.3:a:oracle:communications_converged_application_server_-_service_controller:6.2:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "6.2"
                },
                {
                    "last_affected":  "6.2"
                }
            ],
            "source":  "CPE_STRING",
            "vendor_product":  "oracle:communications_converged_application_server_-_service_controller"
        },
        {
            "cpes":  [
                "cpe:2.3:a:oracle:communications_offline_mediation_controller:12.0.0.3.0:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "12.0.0.3.0"
                },
                {
                    "last_affected":  "12.0.0.3.0"
                }
            ],
            "source":  "CPE_STRING",
            "vendor_product":  "oracle:communications_offline_mediation_controller"
        },
        {
            "cpes":  [
                "cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.3.0:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "12.0.0.3.0"
                },
                {
                    "last_affected":  "12.0.0.3.0"
                }
            ],
            "source":  "CPE_STRING",
            "vendor_product":  "oracle:communications_pricing_design_center"
        },
        {
            "cpes":  [
                "cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "7.0"
                },
                {
                    "last_affected":  "7.0"
                }
            ],
            "source":  "CPE_STRING",
            "vendor_product":  "oracle:communications_services_gatekeeper"
        },
        {
            "cpes":  [
                "cpe:2.3:a:oracle:flexcube_private_banking:12.0.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:flexcube_private_banking:12.1.0:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "12.0.0"
                },
                {
                    "last_affected":  "12.0.0"
                },
                {
                    "introduced":  "12.1.0"
                },
                {
                    "last_affected":  "12.1.0"
                }
            ],
            "source":  "CPE_STRING",
            "vendor_product":  "oracle:flexcube_private_banking"
        }
    ]
}
References

Affected packages

Git / github.com/apache/beam

Affected ranges

Type
GIT
Repo
https://github.com/apache/beam
Events
Introduced
e859735df4778a545ea06262964ea19e53b06f91
Last Affected
9d03de35c512b317f5e1c22aec821e1c44029a1a
Database specific
Show details 
{
    "cpe":  [
        "cpe:2.3:a:apache:beam:2.21.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:beam:2.22.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:beam:2.23.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:beam:2.24.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:beam:2.25.0:*:*:*:*:*:*:*"
    ],
    "extracted_events":  [
        {
            "introduced":  "2.21.0"
        },
        {
            "last_affected":  "2.21.0"
        },
        {
            "introduced":  "2.22.0"
        },
        {
            "last_affected":  "2.22.0"
        },
        {
            "introduced":  "2.23.0"
        },
        {
            "last_affected":  "2.23.0"
        },
        {
            "introduced":  "2.24.0"
        },
        {
            "last_affected":  "2.24.0"
        },
        {
            "introduced":  "2.25.0"
        },
        {
            "last_affected":  "2.25.0"
        }
    ],
    "source":  "CPE_STRING"
}

Affected versions

2.*
2.21.0
2.22.0
2.23.0
2.24.0
2.25.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-27216.json"

Git / github.com/jetty/jetty.project

Affected ranges

Type
GIT
Repo
https://github.com/jetty/jetty.project
Events
Introduced
eea06004f5a0a234b20f3ee8259f33b5b6967372
Fixed
dc45408dd3f9543c51643ececa5dca76ca08d219
Introduced
bf9d17540c7ae4c91be30c045a9485aa2030d3e5
Last Affected
de97d26f7bd222a0e16831e353d702a7a422f711
Introduced
57e5cd8a4d1e5fe0eb77443139253a6878f9c3e7
Last Affected
9ce21ec22be920f61d3c840718d661c0f9d1e174
Database specific
Show details 
{
    "cpe":  [
        "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:eclipse:jetty:10.0.0:alpha1:*:*:*:*:*:*",
        "cpe:2.3:a:eclipse:jetty:10.0.0:beta0:*:*:*:*:*:*",
        "cpe:2.3:a:eclipse:jetty:10.0.0:beta1:*:*:*:*:*:*",
        "cpe:2.3:a:eclipse:jetty:10.0.0:beta2:*:*:*:*:*:*",
        "cpe:2.3:a:eclipse:jetty:11.0.0:beta1:*:*:*:*:*:*",
        "cpe:2.3:a:eclipse:jetty:11.0.0:beta2:*:*:*:*:*:*"
    ],
    "extracted_events":  [
        {
            "introduced":  "1.0"
        },
        {
            "fixed":  "9.3.29"
        },
        {
            "introduced":  "9.4.0"
        },
        {
            "last_affected":  "9.4.32"
        },
        {
            "introduced":  "10.0.0-alpha1"
        },
        {
            "last_affected":  "10.0.0-alpha1"
        },
        {
            "introduced":  "10.0.0-beta0"
        },
        {
            "last_affected":  "10.0.0-beta0"
        },
        {
            "introduced":  "10.0.0-beta1"
        },
        {
            "last_affected":  "10.0.0-beta1"
        },
        {
            "introduced":  "10.0.0-beta2"
        },
        {
            "last_affected":  "10.0.0-beta2"
        },
        {
            "introduced":  "11.0.0-beta1"
        },
        {
            "last_affected":  "11.0.0-beta1"
        },
        {
            "introduced":  "11.0.0-beta2"
        },
        {
            "last_affected":  "11.0.0-beta2"
        }
    ],
    "source":  [
        "CPE_RANGE",
        "CPE_STRING"
    ]
}

Affected versions

10.*
10.0.0-alpha1
10.0.0-beta0
10.0.0-beta1
10.0.0-beta2
11.*
11.0.0-beta1
11.0.0-beta2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-27216.json"