Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-24719

Опубликовано: 12 нояб. 2020
Источник: nvd
CVSS3: 9.8
CVSS2: 10
EPSS Средний

Описание

Exposed Erlang Cookie could lead to Remote Command Execution (RCE) attack. Communication between Erlang nodes is done by exchanging a shared secret (aka "magic cookie"). There are cases where the magic cookie is included in the content of the logs. An attacker can use the cookie to attach to an Erlang node and run OS level commands on the system running the Erlang node. Affects version: 6.5.1. Fix version: 6.6.0.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:couchbase:couchbase_server:*:*:*:*:*:*:*:*
Версия от 6.5.1 (включая) до 6.6.0 (исключая)

EPSS

Процентиль: 98%
0.63523
Средний

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-78

Связанные уязвимости

github
больше 3 лет назад

Exposed Erlang Cookie could lead to Remote Command Execution (RCE) attack. Communication between Erlang nodes is done by exchanging a shared secret (aka "magic cookie"). There are cases where the magic cookie is included in the content of the logs. An attacker can use the cookie to attach to an Erlang node and run OS level commands on the system running the Erlang node. Affects version: 6.5.1. Fix version: 6.6.0.

EPSS

Процентиль: 98%
0.63523
Средний

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-78