PT-2026-2356 · Cobbr+1 · Covenant

Coastal · Publicado 2026-01-13 · Atualizado 2026-01-29 · CVE-2020-36911

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Covenant versions 0.1.3 through 0.5

Description The software contains a remote code execution issue that allows attackers to create malicious JWT tokens with administrative privileges. Attackers can generate forged tokens with admin roles and upload custom DLL payloads to execute arbitrary commands on the target system. The vulnerability involves crafting JWT tokens to gain unauthorized access and execute code.

Recommendations Update to a newer version that addresses this issue.

Exploit

Correção

RCE

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2020-36911

Produtos afetados

Covenant

Referências · 10

• 🔥 https://github.com/Zeop-CyberSec/covenant_rce/blob/master/covenant_jwt_rce.rb · Exploit
• 🔥 https://exploit-db.com/exploits/51141 · Exploit
• 🔥 https://web.archive.org/web/20201101052547/https://blog.null.farm/hunting-the-hunters · Exploit
• https://github.com/cobbr/Covenant · Nota
• https://vulncheck.com/advisories/covenant-remote-code-execution-rce · Nota
• https://cobbr.io/Covenant.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2020-36911 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2020-36911 · Aviso do Fabricante
• https://t.me/cveNotify/150222 · Publicação no Telegram
• https://web.archive.org/web/20201013165001/https://twitter.com/cobbr_io/status/1316058367161401344 · Correção, Aviso do Fabricante