PT-2020-14518 · Riverbed · Steelcentral Aternity Agent

Published 2020-07-27 · Updated 2021-07-21 · CVE-2020-15593

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SteelCentral Aternity Agent version 11.0.0.120

Description The issue concerns the mishandling of Inter-Process Communication (IPC) by the SteelCentral Aternity Agent. It allows any user on the system to access the interprocess communication channel AternityAgentAssistantIpc, retrieve a serialized object, and call object methods remotely. This enables users to perform various actions, including creating and/or overwriting arbitrary XML files across the system, creating arbitrary directories, and loading arbitrary plugins (C# assemblies) from a specific directory and executing the code contained within them.

Recommendations For SteelCentral Aternity Agent version 11.0.0.120, consider restricting access to the AternityAgentAssistantIpc interprocess communication channel to prevent unauthorized users from accessing and manipulating the system. Additionally, limit the ability to load and execute plugins from the "%PROGRAMFILES(X86)/Aternity Information Systems/Assistant/plugins" directory to minimize the risk of arbitrary code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2020-15593

Affected Products

Steelcentral Aternity Agent

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-15593 · Security Note
• https://osv.dev/vulnerability/CVE-2020-15593 · Vendor Advisory
• https://sec-consult.com/en/blog/advisories/privilege-escalation-vulnerability-in-steelcentral-aternity-agent-cve-2020-15592-cve-2020-15593 · Note
• https://aternity.force.com/customersuccess/s/article/Recorder-tool-security-notification-mitigation-steps-for-On-Prem · Note