Vulnerability Details : CVE-2020-28169
Potential exploit
The td-agent-builder plugin before 2020-12-18 for Fluentd allows attackers to gain privileges because the bin directory is writable by a user account, but a file in bin is executed as NT AUTHORITY\SYSTEM.
Products affected by CVE-2020-28169
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:a:td-agent-builder_project:td-agent-builder:*:*:*:*:*:fluentd:*:*
Exploit prediction scoring system (EPSS) score for CVE-2020-28169
0.17%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 54 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2020-28169
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
6.9
|
MEDIUM | AV:L/AC:M/Au:N/C:C/I:C/A:C |
3.4
|
10.0
|
NIST | |
|
7.0
|
HIGH | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
1.0
|
5.9
|
NIST |
CWE ids for CVE-2020-28169
-
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.Assigned by: nvd@nist.gov (Primary)
References for CVE-2020-28169
-
https://github.com/fluent-plugins-nursery/td-agent-builder/pull/247/commits/6f9cb6393392d62caa99907c0ebbcbab6b94a3f1
windows: mitigate possible escalation of privileges by kenhys · Pull Request #247 · fluent-plugins-nursery/td-agent-builder · GitHubPatch;Third Party Advisory
-
http://packetstormsecurity.com/files/160791/Fluentd-TD-agent-4.0.1-Insecure-Folder-Permission.html
Fluentd TD-agent 4.0.1 Insecure Folder Permission ≈ Packet StormExploit;Third Party Advisory;VDB Entry
-
https://www.fluentd.org/
Fluentd | Open Source Data Collector | Unified Logging LayerVendor Advisory
-
https://www.debian.org/security/2021/dsa-4949
Debian -- Security Information -- DSA-4949-1 jetty9Third Party Advisory
-
https://docs.fluentd.org/installation/install-by-msi
Install by .msi Installer (Windows) - FluentdProduct;Vendor Advisory
-
https://github.com/kenhys/td-agent-builder/commit/eec6e2dedf12f2e0c01c2bbe7b8c15b639b3b938
windows: mitigate possible escalation of privileges · kenhys/td-agent-builder@eec6e2d · GitHubPatch;Third Party Advisory
-
https://td-agent-package-browser.herokuapp.com/4/windows
Index of packages.treasuredata.com/4/windowsThird Party Advisory
-
https://github.com/fluent/fluentd/issues/3201
Possible Vulnerability · Issue #3201 · fluent/fluentd · GitHubExploit;Issue Tracking;Third Party Advisory
Jump to