PT-2021-11929 · Redash · Redash

Jorgectf · Published 2021-03-18 · Updated 2024-03-06 · CVE-2020-36144

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Redash version 8.0.0

Description: The issue is related to LDAP Injection, allowing for authentication bypass and information leak through specially crafted queries. This is due to the lack of sanitization in the username included in the search filter. The vulnerable code uses the auth ldap user function with username and password parameters, and the LDAP SEARCH TEMPLATE setting is formatted with the username variable, which lacks proper sanitization.

Recommendations: For Redash version 8.0.0, ensure proper sanitization of the username variable in the LDAP SEARCH TEMPLATE setting to prevent LDAP Injection attacks. As a temporary workaround, consider restricting access to the LDAP authentication mechanism until a patch is available.

Fix

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

BIT-REDASH-2020-36144

CVE-2020-36144

Affected Products

Redash

References · 6

• https://osv.dev/vulnerability/BIT-redash-2020-36144 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-36144 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-36144 · Security Note
• https://github.com/getredash/redash/releases · Note
• https://github.com/getredash/redash/issues/5426 · Note
• https://t.me/cibsecurity/25154 · Telegram Post