🔙 목록으로 돌아가기

CVE-2020-26214: Alerta < 8.1.0 - Authentication Bypass

TitleAlerta < 8.1.0 - Authentication Bypass
AuthorCasperGN,daffainfo
SeverityCritical
ImpactSuccessful exploitation of this vulnerability allows an attacker to bypass authentication and gain unauthorized access to Alerta.
RemediationUpgrade Alerta to version 8.1.0 or later to mitigate this vulnerability.
CVSS Score9.8
EPSS Score0.88241
CVE IDCVE-2020-26214
CWE IDCWE-287
Tags cve cve2020 alerta auth-bypass alerta_project passive vuln

🔍 Vulnerability Description

Alerta prior to version 8.1.0 is prone to authentication bypass when using LDAP as an authorization provider and the LDAP server accepts Unauthenticated Bind requests.

🌐 HTTP Request

GET /api/config HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:1.9.7.20) Gecko/ Firefox/3.6.8
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26214.yaml

🦈 Packet Capture: ⬇️ Download cve-2020-26214.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A