by Kastro
Paper/Archive/CVE-2020-36911

CVE-2020-36911

Cobbr Covenant — Covenant 0.5 - Remote Code Execution (RCE)

EPSS 12%public exploitCVSS 9.8
critical.is priorityof 100
59
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 96.2.962 × 2019.2Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Covenant 0.1.3 - 0.5 contains a remote code execution vulnerability that allows attackers to craft malicious JWT tokens with administrative privileges. Attackers can generate forged tokens with admin roles and upload custom DLL payloads to execute arbitrary commands on the target system.

Affected

ProductAffectedFixed inSource
Covenant0.1.3 – 0.5–CNA

Scores by source

VulnCheck (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
VulnCheck (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

exploitexploit-db.com/exploits/51141refcobbr.io/Covenant.htmlrefgithub.com/cobbr/Covenantexploitweb.archive.org/web/20201101052547/https://blog.null.farm/hunting-the-huntersexploitgithub.com/Zeop-CyberSec/covenant_rce/blob/master/covenant_jwt_rce.rbpatchweb.archive.org/web/20201013165001/https://twitter.com/cobbr_io/status/1316058367161401344writeupvulncheck.com/advisories/covenant-remote-code-execution-rce