CVE-2020-26943

Katalog CVE

CVSS 9.9 · Critical EPSS 3,3%

Kerentanan pada openstack blazar-dashboard. Skor CVSS 3.1 9.9 (Critical) menurut NVD.

Deskripsi (NVD)

An issue was discovered in OpenStack blazar-dashboard before 1.3.1, 2.0.0, and 3.0.0. A user allowed to access the Blazar dashboard in Horizon may trigger code execution on the Horizon host as the user the Horizon service runs under (because the Python eval function is used). This may result in Horizon host unauthorized access and further compromise of the Horizon service. All setups using the Horizon dashboard with the blazar-dashboard plugin are affected.

Rincian

Terbit di NVD

16 Oktober 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.9 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

3,3% peluang dieksploitasi; lebih tinggi dari 88,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://www.openwall.com/lists/oss-security/2020/10/16/5 advisory pihak ketiga
• https://launchpad.net/bugs/1895688 advisory pihak ketiga
• https://review.opendev.org/755810 advisory pihak ketiga
• https://review.opendev.org/755812 advisory pihak ketiga
• https://review.opendev.org/755813 advisory pihak ketiga
• https://review.opendev.org/755814 advisory pihak ketiga
• https://review.opendev.org/756064 advisory pihak ketiga
• https://security.openstack.org/ossa/OSSA-2020-007.html advisory pihak ketiga