{"id":"CVE-2020-29582","aliases":["GHSA-cqj8-47ch-rvvq"],"url":"https://o3.security/vulnerability/CVE-2020-29582","summary":"Incorrect Default Permissions in JetBrains Kotlin","details":"In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permissions.","published":"2021-02-03T16:15:13.727Z","modified":"2026-07-08T05:56:28.334963547Z","cvss":{"score":5.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Maven","name":"org.jetbrains.kotlin:kotlin-stdlib","fixedVersion":"1.4.21"}],"fix":null,"references":[{"type":"ADVISORY","url":"https://blog.jetbrains.com"},{"type":"ADVISORY","url":"https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/"},{"type":"ADVISORY","url":"https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe%40%3Cusers.kafka.apache.org%3E"},{"type":"FIX","url":"https://www.oracle.com//security-alerts/cpujul2021.html"},{"type":"FIX","url":"https://www.oracle.com/security-alerts/cpuapr2022.html"},{"type":"FIX","url":"https://www.oracle.com/security-alerts/cpujan2022.html"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-08T05:56:28.334963547Z"}}