CVE-2020-11498 Path traversal in n/a
A relative path vulnerability in Slack Nebula allows attackers to execute arbitrary code with root privileges or user-level persistence.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-11498?
CVE-2020-11498 is a high-severity path traversal vulnerability in n/a, published on 2 Apr 2020. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Slack Nebula through 1.1.0 contains a relative path vulnerability that allows a low-privileged attacker to execute code in the context of the root user via tun_darwin.go or tun_windows.go. A user can also use Nebula to execute arbitrary code in the user's own context, e.g., for user-level persistence or to bypass security controls. NOTE: the vendor states that this "requires a high degree of access and other preconditions that are tough to achieve."
Weakness: CWE-22
Which versions are affected by CVE-2020-11498?
It affects 1 product.
Products include Slack Nebula.
How do I fix CVE-2020-11498?
No fix has been published for CVE-2020-11498 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2020-11498 being exploited?
There is no known exploitation of CVE-2020-11498 in the wild and no public exploit code.