CVE-2020-26943

{"id": "CVE-2020-26943", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", "authentication": "SINGLE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.9, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 3.1}]}, "published": "2020-10-16T06:15:12.527", "references": [{"url": "http://www.openwall.com/lists/oss-security/2020/10/16/5", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://launchpad.net/bugs/1895688", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://review.opendev.org/755810", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://review.opendev.org/755812", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://review.opendev.org/755813", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://review.opendev.org/755814", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://review.opendev.org/756064", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://security.openstack.org/ossa/OSSA-2020-007.html", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.openwall.com/lists/oss-security/2020/10/16/5", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://launchpad.net/bugs/1895688", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://review.opendev.org/755810", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://review.opendev.org/755812", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://review.opendev.org/755813", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://review.opendev.org/755814", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://review.opendev.org/756064", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://security.openstack.org/ossa/OSSA-2020-007.html", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in OpenStack blazar-dashboard before 1.3.1, 2.0.0, and 3.0.0. A user allowed to access the Blazar dashboard in Horizon may trigger code execution on the Horizon host as the user the Horizon service runs under (because the Python eval function is used). This may result in Horizon host unauthorized access and further compromise of the Horizon service. All setups using the Horizon dashboard with the blazar-dashboard plugin are affected."}, {"lang": "es", "value": "Se detect\u00f3 un problema en OpenStack blazar-dashboard versiones anteriores a 1.3.1, 2.0.0 y 3.0.0. Un usuario al que se le permite acceder al panel Blazar en Horizon puede activar una ejecuci\u00f3n de c\u00f3digo en el host de Horizon como el usuario bajo el cual se ejecuta el servicio de Horizon (porque la funci\u00f3n eval de Python es usada). Esto puede resultar en un acceso no autorizado del host de Horizon y un mayor compromiso del servicio de Horizon. Todas las configuraciones que usan el panel de Horizon con el plugin blazar-dashboard est\u00e1n afectadas"}], "lastModified": "2024-11-21T05:20:33.137", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:openstack:blazar-dashboard:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C542CF97-351B-46A8-B373-B1F2CD5DA304", "versionEndExcluding": "1.3.1"}, {"criteria": "cpe:2.3:a:openstack:blazar-dashboard:2.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0919CDBF-253D-42F1-82F2-925F5E5284FB"}, {"criteria": "cpe:2.3:a:openstack:blazar-dashboard:3.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "148468A5-A1F5-4373-91AB-F5CD4264BA5B"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}