CVE-2020-28086

{"id": "CVE-2020-28086", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2020-12-09T19:15:11.593", "references": [{"url": "https://lists.zx2c4.com/pipermail/password-store/2014-March/000498.html", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://lists.zx2c4.com/pipermail/password-store/2014-March/000498.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-347"}]}], "descriptions": [{"lang": "en", "value": "pass through 1.7.3 has a possibility of using a password for an unintended resource. For exploitation to occur, the user must do a git pull, decrypt a password, and log into a remote service with the password. If an attacker controls the central Git server or one of the other members' machines, and also controls one of the services already in the password store, they can rename one of the password files in the Git repository to something else: pass doesn't correctly verify that the content of a file matches the filename, so a user might be tricked into decrypting the wrong password and sending that to a service that the attacker controls. NOTE: for environments in which this threat model is of concern, signing commits can be a solution."}, {"lang": "es", "value": "pass versiones hasta 1.7.3, presenta la posibilidad de utilizar una contrase\u00f1a para un recurso no deseado. Para que ocurra la explotaci\u00f3n, el usuario debe hacer un pull de git, descifrar una contrase\u00f1a e iniciar sesi\u00f3n en un servicio remoto con la contrase\u00f1a. Si un atacante controla el servidor central de Git o una de las m\u00e1quinas de los otros miembros, y tambi\u00e9n controla uno de los servicios que ya est\u00e1n en el almac\u00e9n de contrase\u00f1as, puede cambiar el nombre de uno de los archivos de contrase\u00f1as en el repositorio de Git a otra cosa: el pase no verifica correctamente que el contenido de un archivo coincida con el nombre del archivo, por lo que un usuario podr\u00eda ser enga\u00f1ado para que descifre la contrase\u00f1a incorrecta y la env\u00ede a un servicio que controla el atacante. NOTA: para entornos en los que este modelo de amenaza es una preocupaci\u00f3n, la firma de confirmaciones puede ser una soluci\u00f3n"}], "lastModified": "2024-11-21T05:22:19.390", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:zx2c4:password-store:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FA29FB3C-65F9-494B-BE3A-EBA15C1C9FC9", "versionEndIncluding": "1.7.3"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}