CVE-2020-8445

{"id": "CVE-2020-8445", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2020-01-30T01:15:10.917", "references": [{"url": "https://github.com/ossec/ossec-hids/issues/1814", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/ossec/ossec-hids/issues/1821", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://security.gentoo.org/glsa/202007-33", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.ossec.net/", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "In OSSEC-HIDS 2.7 through 3.5.0, the OS_CleanMSG function in ossec-analysisd doesn't remove or encode terminal control characters or newlines from processed log messages. In many cases, those characters are later logged. Because newlines (\\n) are permitted in messages processed by ossec-analysisd, it may be possible to inject nested events into the ossec log. Use of terminal control characters may allow obfuscating events or executing commands when viewed through vulnerable terminal emulators. This may be an unauthenticated remote attack for certain types and origins of logged data."}, {"lang": "es", "value": "En OSSEC-HIDS versiones 2.7 hasta 3.5.0, la funci\u00f3n OS_CleanMSG en ossec-analysisd no elimina ni codifica caracteres de control de terminal o nuevas l\u00edneas de mensajes de registro procesados. En muchos casos, esos caracteres son registrados luego. Debido a que nuevas l\u00edneas (\\n) son permitidas en los mensajes procesados ??por ossec-analysisd, puede ser posible inyectar eventos anidados en el registro de ossec. El uso de caracteres de control de terminal puede permitir eventos de ofuscaci\u00f3n o ejecutar comandos cuando se visualizaron por medio de emuladores de terminal vulnerables. Este puede ser un ataque remoto no autenticado para ciertos tipos y or\u00edgenes de datos registrados."}], "lastModified": "2022-09-12T18:42:40.763", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ossec:ossec:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B349E3E6-F70E-41A0-843D-202A82473ABD", "versionEndIncluding": "3.5.0", "versionStartIncluding": "2.7"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}