PT-2020-2070 · Git+5 · Git+5

Carlo Arenas

·

Published

2020-04-20

·

Updated

2024-06-15

·

CVE-2020-11008

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Git versions prior to 2.26.2 Git versions prior to 2.25.4 Git versions prior to 2.24.3 Git versions prior to 2.23.3 Git versions prior to 2.22.4 Git versions prior to 2.21.3 Git versions prior to 2.20.4 Git versions prior to 2.19.5 Git versions prior to 2.18.4 Git versions prior to 2.17.5
Description The issue is related to Git's "credential helper" programs, which can be tricked into sending private credentials to a host controlled by an attacker. This can be achieved by feeding a malicious URL to git clone, potentially through systems that automatically clone URLs, such as Git submodules or package systems built around Git. The vulnerability can be triggered by specially-crafted URLs that are considered illegal, causing Git to send a "blank" pattern to helpers, which may interpret this as matching any URL and return some unspecified stored password. The estimated number of potentially affected devices is not provided.
Recommendations For Git versions prior to 2.26.2, update to version 2.26.2 or later. For Git versions prior to 2.25.4, update to version 2.25.4 or later. For Git versions prior to 2.24.3, update to version 2.24.3 or later. For Git versions prior to 2.23.3, update to version 2.23.3 or later. For Git versions prior to 2.22.4, update to version 2.22.4 or later. For Git versions prior to 2.21.3, update to version 2.21.3 or later. For Git versions prior to 2.20.4, update to version 2.20.4 or later. For Git versions prior to 2.19.5, update to version 2.19.5 or later. For Git versions prior to 2.18.4, update to version 2.18.4 or later. For Git versions prior to 2.17.5, update to version 2.17.5 or later. As a temporary workaround, consider disabling the store helper, cache helper, or osxkeychain helper until a patch is available. Restrict access to the vulnerable credential.helper module to minimize the risk of exploitation. Avoid using the credential.helper module with vulnerable versions of Git until the issue is resolved.

Fix

Insufficiently Protected Credentials

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALT-PU-2020-1786
ALT-PU-2020-1826
BDU:2020-01904
BIT-GIT-2020-5260
CESA-2020_1980
CESA-2020_2337
CVE-2020-11008
DLA-2182-1
DSA-4659-1
GHSA-HJC9-X69F-JQJ7
GHSA-QM7J-C969-7J4Q
MGASA-2020-0181
OPENSUSE-SU-2020:0598-1
OPENSUSE-SU-2020_0598-1
OPENSUSE-SU-2024:10786-1
RHSA-2020:1975
RHSA-2020:1978
RHSA-2020:1979
RHSA-2020:1980
RHSA-2020:2337
RHSA-2020:3581
RHSA-2020_1980
RHSA-2020_2337
SUSE-SU-2020:1121-1
SUSE-SU-2020:1295-1
USN-4334-1

Affected Products

Alt Linux
Centos
Git
Red Hat
Suse
Ubuntu