PT-2020-20132 · Kinetica · Kinetica

Published 2020-02-11 · Updated 2021-07-21 · CVE-2020-8429

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Kinetica version 7.0.9.2.20191118151947

Description The issue concerns the Admin web application, where the getLogs function does not properly sanitise input. This could allow an authenticated attacker to run remote code on the underlying operating system by exploiting the logFile parameter. The parameter is used in a command to read log files, but poor input sanitisation makes it possible to bypass a replacement and break out of the command.

Recommendations For Kinetica version 7.0.9.2.20191118151947, consider disabling the getLogs function until a patch is available to prevent potential remote code execution. Restrict access to the logFile parameter in the getLogs function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2020-8429

Affected Products

Kinetica

References · 4

• 🔥 https://nccgroup.trust/uk/our-research/technical-advisory-command-injection/?research=Technical+advisories · Exploit
• https://osv.dev/vulnerability/CVE-2020-8429 · Vendor Advisory
• https://support.kinetica.com/hc/en-us/categories/360001223653-Release-Notes · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-8429 · Security Note