CVE-2020-24612 Auth bypass in n/a
An attacker can bypass two-factor authentication by exploiting a SELinux policy flaw that prevents reading U2F configuration files.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-24612?
CVE-2020-24612 is a medium-severity authentication bypass vulnerability in n/a, published on 24 Aug 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An issue was discovered in the selinux-policy (aka Reference Policy) package 3.14 through 2020-08-24 because the .config/Yubico directory is mishandled. Consequently, when SELinux is in enforced mode, pam-u2f is not allowed to read the user's U2F configuration file. If configured with the nouserok option (the default when configured by the authselect tool), and that file cannot be read, the second factor is disabled. An attacker with only the knowledge of the password can then log in, bypassing 2FA.
Weakness: CWE-287
Which versions are affected by CVE-2020-24612?
It affects 1 product.
Products include Fedoraproject Selinux-Policy.
How do I fix CVE-2020-24612?
Apply the vendor's patch.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2020-24612 being exploited?
There is no known exploitation of CVE-2020-24612 in the wild and no public exploit code.
Sources
Also known as GHSA-j8gx-8c94-5x9v, OESA-2022-1646, UBUNTU-CVE-2020-24612.