CVE-2020-26943: OpenStack blazar-dashboard Code Execution Vulnerability
Summary
CVE-2020-26943: An issue was discovered in OpenStack blazar-dashboard before 1.3.1, 2.0.0, and 3.0.0. Affects blazar-dashboard across 3 version ranges.
< 1.3.1
>= 2.0.0, < 2.0.1
>= 3.0.0, < 3.0.1
Fixed in 1.3.1, 2.0.1 or 3.0.1, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
OpenStack blazar-dashboard is a plugin for the Horizon dashboard that provides a user interface for managing the Blazar resource reservation service. Blazar allows users to reserve resources such as compute nodes, storage, and network bandwidth in OpenStack. The blazar-dashboard plugin integrates with Horizon to provide a seamless user experience for managing resource reservations. However, a vulnerability has been discovered in blazar-dashboard that allows an authenticated user to execute arbitrary code on the Horizon host, potentially leading to unauthorized access and compromise of the Horizon service.
Vulnerability Detail
The vulnerability in blazar-dashboard arises from the use of the Python eval function in the Horizon service. An authenticated user with access to the Blazar dashboard in Horizon can trigger code execution on the Horizon host by exploiting this vulnerability. By crafting malicious input, an attacker can execute arbitrary code with the privileges of the user running the Horizon service. This can result in unauthorized access to the Horizon host and further compromise of the Horizon service. All setups using the Horizon dashboard with the blazar-dashboard plugin are affected by this vulnerability.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
< 1.3.11.3.1pip install --upgrade "blazar-dashboard==1.3.1" -
>= 2.0.0, < 2.0.12.0.1pip install --upgrade "blazar-dashboard==2.0.1" -
>= 3.0.0, < 3.0.13.0.1pip install --upgrade "blazar-dashboard==3.0.1"
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix by upgrading to a fixed version of the blazar-dashboard plugin.
Conclusion
The OpenStack blazar-dashboard plugin is vulnerable to code execution on the Horizon host, allowing an authenticated user to execute arbitrary code with the privileges of the Horizon service. To mitigate this vulnerability, users should upgrade to a fixed version of the blazar-dashboard plugin. No known workarounds exist for this issue. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for blazar-dashboard →
FAQ
Blazar-dashboard is a plugin for the Horizon dashboard that provides a user interface for managing the Blazar resource reservation service in OpenStack.
An authenticated user with access to the Blazar dashboard in Horizon can execute arbitrary code on the Horizon host, potentially leading to unauthorized access and compromise of the Horizon service.
All versions of blazar-dashboard before 1.3.1, 2.0.1, and 3.0.1 are affected by this vulnerability.
There is no known workaround for this vulnerability. It is recommended to upgrade to a fixed version of the blazar-dashboard plugin.
To fix this vulnerability, upgrade your blazar-dashboard installation to one of the fixed versions: 1.3.1, 2.0.1, or 3.0.1.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
