CVE-2020-27216

CVE-2020-27216 is a local privilege escalation vulnerability affecting Eclipse Jetty versions 1.0 through 9.4.32.v20200930, 10.0.0.alpha1 through 10.0.0.beta2, and 11.0.0.alpha1 through 11.0.0.beta2, as well as various products from Apache, Debian, NetApp, Oracle, and VMware. On Unix-like systems, a local attacker can exploit a race condition during temporary directory creation to gain read and write access to sensitive application files. With a CVSS score of 7.0 (High), this vulnerability requires low privileges and high attack complexity, but can lead to complete compromise of confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.