NetSight
IP …
high7.0

CVE-2020-27216

In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the system's …

Impact

In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub directory in the shared temporary directory and race to complete the creation of the temporary subdirectory. If the attacker wins the race then they will have read and write permission to the subdirectory used to unpack web applications, including their WEB-INF/lib jar files and JSP files. If any code is ever executed out of this temporary directory, this can lead to a local privilege escalation vulnerability.

Affected products

VendorProductAffected versions
EclipseJetty
from 1.0 before 9.3.29
from 9.4.0 through 9.4.32
Versions 10.0.0, 11.0.0
NetappSnap Creator Framework
All versions
NetappSnapcenter
All versions
NetappVasa Provider
from 7.2
NetappVirtual Storage Console
from 7.2
NetappStorage Replication Adapter
from 7.2
OracleCommunications Application Session Controller
Version 3.9m0p2
OracleCommunications Converged Application Server - Service Controller
Version 6.2
OracleCommunications Element Manager
from 8.2.1 through 8.2.2.1
OracleCommunications Offline Mediation Controller
Version 12.0.0.3.0
OracleCommunications Pricing Design Center
Version 12.0.0.3.0
OracleCommunications Services Gatekeeper
Version 7.0

Weakness classification

CWE-378CWE-379

References