PT-2020-21521 · Unknown · Bb-Builder

Published 2020-09-03 · Updated 2020-09-03

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions bb-builder versions (affected versions not specified)

Description The issue concerns malicious code embedded in the bb-builder package, which executes an executable targeting Windows and uploads information to a remote server. Any computer with this package installed or running should be considered fully compromised.

Recommendations Remove the bb-builder package, however, be aware that this may not remove all malicious software resulting from its installation. Rotate all secrets and keys stored on the compromised computer immediately from a different computer.

Fix

RCE

Weakness Enumeration

CWE-506

Related Identifiers

GHSA-VM6V-W6Q2-MRRQ

Affected Products

Bb-Builder

References · 2

• https://osv.dev/vulnerability/GHSA-vm6v-w6q2-mrrq · Vendor Advisory
• https://npmjs.com/advisories/1119 · Note