PT-2020-21481 · Unknown · Arsenic-Tabasco-Cyborg-Peanut-Butter
Published
2020-09-03
·
Updated
2020-09-03
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
arsenic-tabasco-cyborg-peanut-butter (affected versions not specified)
Description
The issue concerns malicious code within the software that downloads and runs a script, resulting in a reverse shell being opened in the system. This indicates a severe compromise of the system's security. Any computer with this package installed or running should be considered fully compromised, necessitating the rotation of all secrets and keys stored on it from a different, presumably secure, computer.
Recommendations
Remove the arsenic-tabasco-cyborg-peanut-butter package.
Consider the computer fully compromised and take appropriate measures to secure any sensitive information.
Rotate all secrets and keys stored on the compromised computer from a different computer.
Note that removing the package may not guarantee the removal of all malicious software resulting from its installation.
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Arsenic-Tabasco-Cyborg-Peanut-Butter