CVE-2020-26943: Arbitrary Code Execution in blazar-dashboard
Summary
CVE-2020-26943: Arbitrary Code Execution in blazar-dashboard. Affects blazar-dashboard across 3 version ranges.
< 1.3.1
>= 2.0.0, < 2.0.1
>= 3.0.0, < 3.0.1
Fixed in 1.3.1, 2.0.1 or 3.0.1, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Blazar-dashboard is an OpenStack plugin that provides a dashboard interface for managing the Blazar resource reservation service. It is used in conjunction with the Horizon dashboard. Blazar-dashboard allows users to access and manage Blazar resources through the Horizon interface. However, a vulnerability in blazar-dashboard versions before 1.3.1, 2.0.0, and 3.0.0 allows an authenticated user to execute arbitrary code on the Horizon host, potentially leading to unauthorized access and compromise of the Horizon service.
Vulnerability Detail
The vulnerability arises from the use of the Python eval function in the Blazar dashboard code. An attacker with access to the Blazar dashboard in Horizon can exploit this vulnerability to execute arbitrary code on the Horizon host. By crafting malicious input, the attacker can trigger the eval function and execute code with the privileges of the user running the Horizon service. This can result in unauthorized access to the Horizon host and further compromise of the Horizon service.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
< 1.3.11.3.1pip install --upgrade "blazar-dashboard==1.3.1" -
>= 2.0.0, < 2.0.12.0.1pip install --upgrade "blazar-dashboard==2.0.1" -
>= 3.0.0, < 3.0.13.0.1pip install --upgrade "blazar-dashboard==3.0.1"
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to upgrade to the fixed versions as mentioned in the 'how_to_fix' section.
Conclusion
The vulnerability in blazar-dashboard allows an authenticated user to execute arbitrary code on the Horizon host, potentially leading to unauthorized access and compromise of the Horizon service. It is recommended to upgrade to the fixed versions of blazar-dashboard to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for blazar-dashboard →
FAQ
Blazar-dashboard is an OpenStack plugin that provides a dashboard interface for managing the Blazar resource reservation service.
The vulnerability allows an authenticated user to execute arbitrary code on the Horizon host, potentially leading to unauthorized access and compromise of the Horizon service.
To fix this vulnerability, upgrade to the fixed versions of blazar-dashboard as mentioned in the 'how_to_fix' section.
There is no known workaround for this vulnerability. It is recommended to upgrade to the fixed versions.
You can find more information about this vulnerability in the advisory database provided by GitHub. The link to the advisory is available in the 'affected' section of the vulnerability details.
