RCE in Certtools Intelmq Manager
CVE-2020-11016
IntelMQ Manager from version 1.1.0 and before version 2.1.1 has a vulnerability where the backend incorrectly handled messages given by user-input in the "send" functionality of the Inspect-tool of the Monitor component. An attacker with access to the IntelMQ Manager could possibly use this issue to execute arbitrary code with the privileges of the webserver. Version 2.1.1 fixes the vulnerability.
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.023 (81.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L.
Affected products
- Certtools Intelmq Manager — versions >= 1.1.0, < 2.1.1
- Intelmq_manager_project Intelmq_manager
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM, Patch, Third Party Advisory)
- security-advisories@github.com (Patch, Third Party Advisory, x_refsource_MISC)
- security-advisories@github.com (Third Party Advisory, x_refsource_MISC)
- security-advisories@github.com (Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2020-11016?
- CVE-2020-11016 is a critical-severity vulnerability in Certtools Intelmq Manager, classified under OS Command Injection. CVSS score: 9.1/10. Published 2020-04-30.
- How severe is CVE-2020-11016?
- Critical severity. CVSS v3 base score is 9.1 out of 10.