PT-2021-14454 · Tenable · Tenable For Jira Cloud

Abhiabhi2306 + 1 · Published 2021-03-10 · Updated 2021-03-18 · CVE-2021-21371

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Tenable for Jira Cloud versions prior to 1.1.21

Description The issue allows an attacker with local access to the host to run arbitrary code by running the application with a specially crafted YAML configuration file. This is possible due to the use of the yaml.load() method, which can execute arbitrary commands. The problem is fixed in version 1.1.21 by using yaml.safe load() instead of yaml.load().

Recommendations For versions prior to 1.1.21, update to version 1.1.21 or later, which uses yaml.safe load() instead of yaml.load() to prevent arbitrary code execution. As a temporary workaround, consider manually adjusting yaml.load() to yaml.safe load() in the affected configuration files.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2021-21371

GHSA-8278-88VV-X98R

PYSEC-2021-60

Affected Products

Tenable For Jira Cloud

References · 11

• https://github.com/tenable/integration-jira-cloud/commit/f8c2095fd529e664e7fa25403a0a4a85bb3907d0 · Patch
• https://osv.dev/vulnerability/CVE-2021-21371 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-8278-88vv-x98r · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-21371 · Security Note
• https://osv.dev/vulnerability/PYSEC-2021-60 · Vendor Advisory
• https://github.com/pypa/advisory-database/tree/main/vulns/tenable-jira-cloud/PYSEC-2021-60.yaml · Note
• https://github.com/tenable/integration-jira-cloud/security/advisories/GHSA-8278-88vv-x98r · Note
• https://github.com/tenable/integration-jira-cloud · Note
• https://pyyaml.docsforge.com/master/documentation/#loading-yaml · Note
• https://pypi.org/project/tenable-jira-cloud · Note
• https://t.me/cibsecurity/24745 · Telegram Post