GitHub Advisoryadvisory · PyPI
GHSA-pf5v-pqfv-x8jj OpenCanary Executes Commands From Potentially Writable Config File
MEDIUM
Official page ↗
- Aliases
- CVE-2024-48911
- Ecosystem
- PyPI
- Packages
- OpenCanary
- Severity
- Moderate
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-863
- Reviewed
- 2024-10-14
Affected packages
• PyPI OpenCanary: < 0.9.5 → fixed in 0.9.5
Description
Impact
OpenCanary directly executed commands taken from its config file. Where the config file is stored in an unprivileged user directory but the daemon is executed by root, it’s possible for the unprivileged user to change the config file and escalate permissions when root later runs the daemon.
Thanks to the folks at Whirlylabs for finding and fixing this.
Patches
Upgrade to 0.9.4 or higher.
Related
Alias · CVE (1)
- CVE-2024-48911 OpenCanary, a multi-protocol network honeypot, directly executed commands taken from its config file. vulnerability
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- https://github.com/thinkst/opencanary/security/advisories/GHSA-pf5v-pqfv-x8jj web
- https://nvd.nist.gov/vuln/detail/CVE-2024-48911 advisory
- https://github.com/thinkst/opencanary/commit/2c11575b1a3dd8b0df26a879ba856c0aa350c049 web
- https://github.com/pypa/advisory-database/tree/main/vulns/opencanary/PYSEC-2024-248.yaml web
- https://github.com/thinkst/opencanary package
- https://github.com/thinkst/opencanary/releases/tag/v0.9.4 web