CVE-2020-11020 - Vulnerability Details - OpenCVE

Faye (NPM, RubyGem) versions greater than 0.5.0 and before 1.0.4, 1.1.3 and 1.2.5, has the potential for authentication bypass in the extension system. The vulnerability allows any client to bypass checks put in place by server-side extensions, by appending extra segments to the message channel. It is patched in versions 1.0.4, 1.1.3 and 1.2.5.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact Low

Availability Impact None

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Faye Project	Faye

Configuration 1 [-]

OR	cpe:2.3:a:faye_project:faye::::::node.js::*
	cpe:2.3:a:faye_project:faye::::::ruby::*
	cpe:2.3:a:faye_project:faye::::::node.js::*
	cpe:2.3:a:faye_project:faye::::::ruby::*
	cpe:2.3:a:faye_project:faye::::::node.js::*
	cpe:2.3:a:faye_project:faye::::::ruby::*

No data.

References

Link	Providers
https://github.com/faye/faye/commit/65d297d341b607f3cb0b5fa6021a625a991cc30e
https://github.com/faye/faye/security/advisories/GHSA-qpg4-4w7w-2mq5

History

No history.

MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2020-04-29T17:35:12

Updated: 2024-08-04T11:21:14.232Z

Reserved: 2020-03-30T00:00:00

Link: CVE-2020-11020

Vulnrichment

No data.

NVD

Status : Modified

Published: 2020-04-29T18:15:13.360

Modified: 2024-11-21T04:56:35.843

Link: CVE-2020-11020

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "Faye", "vendor": "faye", "versions": [{"status": "affected", "version": ">= 0.5.0, < 1.0.4"}, {"status": "affected", "version": ">= 1.1.0, < 1.1.3"}, {"status": "affected", "version": ">= 1.2.0, < 1.2.5"}]}], "descriptions": [{"lang": "en", "value": "Faye (NPM, RubyGem) versions greater than 0.5.0 and before 1.0.4, 1.1.3 and 1.2.5, has the potential for authentication bypass in the extension system. The vulnerability allows any client to bypass checks put in place by server-side extensions, by appending extra segments to the message channel. It is patched in versions 1.0.4, 1.1.3 and 1.2.5."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-287", "description": "CWE-287: Improper Authentication", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2020-04-29T17:35:12", "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://github.com/faye/faye/security/advisories/GHSA-qpg4-4w7w-2mq5"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/faye/faye/commit/65d297d341b607f3cb0b5fa6021a625a991cc30e"}], "source": {"advisory": "GHSA-qpg4-4w7w-2mq5", "discovery": "UNKNOWN"}, "title": "Authentication and extension bypass in Faye", "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security-advisories@github.com", "ID": "CVE-2020-11020", "STATE": "PUBLIC", "TITLE": "Authentication and extension bypass in Faye"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Faye", "version": {"version_data": [{"version_value": ">= 0.5.0, < 1.0.4"}, {"version_value": ">= 1.1.0, < 1.1.3"}, {"version_value": ">= 1.2.0, < 1.2.5"}]}}]}, "vendor_name": "faye"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Faye (NPM, RubyGem) versions greater than 0.5.0 and before 1.0.4, 1.1.3 and 1.2.5, has the potential for authentication bypass in the extension system. The vulnerability allows any client to bypass checks put in place by server-side extensions, by appending extra segments to the message channel. It is patched in versions 1.0.4, 1.1.3 and 1.2.5."}]}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-287: Improper Authentication"}]}]}, "references": {"reference_data": [{"name": "https://github.com/faye/faye/security/advisories/GHSA-qpg4-4w7w-2mq5", "refsource": "CONFIRM", "url": "https://github.com/faye/faye/security/advisories/GHSA-qpg4-4w7w-2mq5"}, {"name": "https://github.com/faye/faye/commit/65d297d341b607f3cb0b5fa6021a625a991cc30e", "refsource": "MISC", "url": "https://github.com/faye/faye/commit/65d297d341b607f3cb0b5fa6021a625a991cc30e"}]}, "source": {"advisory": "GHSA-qpg4-4w7w-2mq5", "discovery": "UNKNOWN"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T11:21:14.232Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/faye/faye/security/advisories/GHSA-qpg4-4w7w-2mq5"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/faye/faye/commit/65d297d341b607f3cb0b5fa6021a625a991cc30e"}]}]}, "cveMetadata": {"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "assignerShortName": "GitHub_M", "cveId": "CVE-2020-11020", "datePublished": "2020-04-29T17:35:12", "dateReserved": "2020-03-30T00:00:00", "dateUpdated": "2024-08-04T11:21:14.232Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:faye_project:faye:*:*:*:*:*:node.js:*:*", "matchCriteriaId": "FDF2555F-1E11-4F39-844B-48D120586578", "versionEndExcluding": "1.0.4", "versionStartExcluding": "0.5.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:faye_project:faye:*:*:*:*:*:ruby:*:*", "matchCriteriaId": "F2DB6AE8-AB9B-4A1A-9A23-80A45A3C7FD3", "versionEndExcluding": "1.0.4", "versionStartExcluding": "0.5.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:faye_project:faye:*:*:*:*:*:node.js:*:*", "matchCriteriaId": "4C2E7A43-4236-43CC-8588-DFF7DE651276", "versionEndExcluding": "1.1.3", "versionStartIncluding": "1.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:faye_project:faye:*:*:*:*:*:ruby:*:*", "matchCriteriaId": "C62CA8E2-99F2-4A49-8726-1D1F5EB3F148", "versionEndExcluding": "1.1.3", "versionStartIncluding": "1.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:faye_project:faye:*:*:*:*:*:node.js:*:*", "matchCriteriaId": "A7AECEFE-3AC9-4855-BD8F-9019A6B64541", "versionEndExcluding": "1.2.5", "versionStartIncluding": "1.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:faye_project:faye:*:*:*:*:*:ruby:*:*", "matchCriteriaId": "4005E717-555C-4AEB-9D1B-5400C26F2764", "versionEndExcluding": "1.2.5", "versionStartIncluding": "1.2.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Faye (NPM, RubyGem) versions greater than 0.5.0 and before 1.0.4, 1.1.3 and 1.2.5, has the potential for authentication bypass in the extension system. The vulnerability allows any client to bypass checks put in place by server-side extensions, by appending extra segments to the message channel. It is patched in versions 1.0.4, 1.1.3 and 1.2.5."}, {"lang": "es", "value": "Faye (NPM, RubyGem) versiones superiores a 0.5.0 y anteriores a 1.0.4, 1.1.3 y 1.2.5, presentan el potencial de omitir la autenticaci\u00f3n en el sistema de extensiones. La vulnerabilidad permite que cualquier cliente omita las comprobaciones establecidas por las extensiones del lado del servidor, al agregar segmentos adicionales al canal de mensajes. Est\u00e1 parcheado en las versiones 1.0.4, 1.1.3 y 1.2.5."}], "id": "CVE-2020-11020", "lastModified": "2024-11-21T04:56:35.843", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.1, "impactScore": 4.7, "source": "security-advisories@github.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-04-29T18:15:13.360", "references": [{"source": "security-advisories@github.com", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/faye/faye/commit/65d297d341b607f3cb0b5fa6021a625a991cc30e"}, {"source": "security-advisories@github.com", "tags": ["Exploit", "Mitigation", "Third Party Advisory"], "url": "https://github.com/faye/faye/security/advisories/GHSA-qpg4-4w7w-2mq5"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/faye/faye/commit/65d297d341b607f3cb0b5fa6021a625a991cc30e"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Mitigation", "Third Party Advisory"], "url": "https://github.com/faye/faye/security/advisories/GHSA-qpg4-4w7w-2mq5"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}], "source": "security-advisories@github.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-287"}], "source": "nvd@nist.gov", "type": "Primary"}]}