CVE-2020-15592 Path traversal in n/a
A path traversal vulnerability in SteelCentral Aternity Agent allows attackers to load arbitrary plugins via IPC, leading to privilege escalation and code execution.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-15592?
CVE-2020-15592 is a high-severity path traversal vulnerability in n/a, published on 27 Jul 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
SteelCentral Aternity Agent before 11.0.0.120 on Windows allows Privilege Escalation via a crafted file. It uses an executable running as a high privileged Windows service to perform administrative tasks and collect data from other processes. It distributes functionality among different processes and uses IPC (Inter-Process Communication) primitives to enable the processes to cooperate. The remotely callable methods from remotable objects available through interprocess communication allow loading of arbitrary plugins (i.e., C# assemblies) from the "%PROGRAMFILES(X86)%/Aternity Information Systems/Assistant/plugins” directory, where the name of the plugin is passed as part of an XML-serialized object. However, because the name of the DLL is concatenated with the “.\plugins” string, a directory traversal vulnerability exists in the way plugins are resolved.
Weakness: CWE-22
Which versions are affected by CVE-2020-15592?
It affects 1 product.
Products include Riverbed Steelcentral Aternity Agent.
How do I fix CVE-2020-15592?
No fix has been published for CVE-2020-15592 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2020-15592 being exploited?
There is no known exploitation of CVE-2020-15592 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-wvfg-7crv-xg2v.