CVE:CVE-2020-8908
CNNVD:CNNVD-202012-827
Google Guava是美国谷歌（Google）公司的一款包括图形库、函数类型、I/O和字符串处理等的Java核心库。
Google Guava 30.0版本之前存在访问控制错误漏洞，该漏洞源于Guava存在一个临时目录创建漏洞，允许访问机器的攻击者可利用该漏洞潜在地访问由Guava com.google.common.io. Files. createTempDir() 创建的临时目录中的数据。攻击者可以利用该漏洞访问特殊目录。
solution:Upgrade google guava to a higher version than 32.0.0,and avoid the version (,32.0.0); Upgrade quarkus quarkus to a higher version than 1.11.4,and avoid the version (,1.11.4); Upgrade oracle commerce_guided_search to a higher version than 11.3.2,and avoid the version 11.3.2; Upgrade oracle communications_cloud_native_core_network_slice_selection_function to a higher version than 1.2.1,and avoid the version 1.2.1; Upgrade oracle communications_pricing_design_center to a higher version than 12.0.0.4.0,12.0.0.5.0,and avoid the version 12.0.0.4.0,12.0.0.5.0; Upgrade oracle data_integrator to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle nosql_database to a higher version than 20.3,and avoid the version (,20.3); Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.57,8.58,8.59,and avoid the version 8.57,8.58,8.59; Upgrade oracle retail_customer_management_and_segmentation_foundation to a higher version than 19.0,and avoid the version [16.0,19.0]; Upgrade oracle weblogic_server to a higher version than 14.1.1.0.0,and avoid the version 14.1.1.0.0; Upgrade oracle communications_cloud_native_core_network_repository_function to a higher version than 1.14.0,and avoid the version 1.14.0; Upgrade oracle primavera_unifier to a higher version than 17.12,18.8,19.12,20.12,21.12,and avoid the version [17.7,17.12],18.8,19.12,20.12,21.12; Upgrade netapp active_iq_unified_manager to a higher version than -