PT-2020-14517 · Riverbed · Steelcentral Aternity Agent

Published 2020-07-27 · Updated 2020-07-30 · CVE-2020-15592

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions SteelCentral Aternity Agent versions prior to 11.0.0.120

Description The issue allows for privilege escalation via a crafted file. It involves an executable running as a high-privileged Windows service that performs administrative tasks and collects data from other processes. The software uses Inter-Process Communication (IPC) primitives to enable different processes to cooperate, and it allows the loading of arbitrary plugins (C# assemblies) from a specific directory. A directory traversal vulnerability exists in the way plugins are resolved, as the name of the DLL is concatenated with the ".plugins" string.

Recommendations For versions prior to 11.0.0.120, update to version 11.0.0.120 or later to resolve the issue. As a temporary workaround, consider restricting access to the "%PROGRAMFILES(X86)%/Aternity Information Systems/Assistant/plugins" directory to minimize the risk of exploitation. Avoid using the plugin loading functionality until the issue is resolved.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2020-15592

Affected Products

Steelcentral Aternity Agent

References · 4

• https://osv.dev/vulnerability/CVE-2020-15592 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15592 · Security Note
• https://sec-consult.com/en/blog/advisories/privilege-escalation-vulnerability-in-steelcentral-aternity-agent-cve-2020-15592-cve-2020-15593 · Note
• https://aternity.force.com/customersuccess/s/article/Recorder-tool-security-notification-mitigation-steps-for-On-Prem · Note