Published: 24/12/2020 Updated: 05/04/2022

CVSS v2 Base Score: 6.9 | Impact Score: 10 | Exploitability Score: 3.4

CVSS v3 Base Score: 7 | Impact Score: 5.9 | Exploitability Score: 1

VMScore: 614

Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

The td-agent-builder plugin prior to 2020-12-18 for Fluentd allows malicious users to gain privileges because the bin directory is writable by a user account, but a file in bin is executed as NT AUTHORITY\SYSTEM.

Vulnerable Product	Search on Vulmon	Subscribe to Product
td-agent-builder_project td-agent-builder
debian debian linux 10.0

Multiple vulnerabilities were discovered in Jetty, a Java servlet engine and webserver which could result in cross-site scripting, information disclosure, privilege escalation or denial of service For the stable distribution (buster), these problems have been fixed in version 9416-0+deb10u1 We recommend that you upgrade your jetty9 packages Fo ...

Fluentd TD-agent plugin version 401 suffers from an insecure folder permission vulnerability ...

Insecure Folder permission that lead to privilege escalation

FluentD-TD-agent-WindowsExploit <V401 CVE-2020-28169 Insecure Folder permission that leads to privilege escalation Download URL: td-agent-package-browserherokuappcom/4/windows

CWE-732 https://github.com/kenhys/td-agent-builder/commit/eec6e2dedf12f2e0c01c2bbe7b8c15b639b3b938 https://www.fluentd.org/https://td-agent-package-browser.herokuapp.com/4/windows https://docs.fluentd.org/installation/install-by-msi https://github.com/fluent/fluentd/issues/3201 https://github.com/fluent-plugins-nursery/td-agent-builder/pull/247/commits/6f9cb6393392d62caa99907c0ebbcbab6b94a3f1 http://packetstormsecurity.com/files/160791/Fluentd-TD-agent-4.0.1-Insecure-Folder-Permission.html https://www.debian.org/security/2021/dsa-4949 https://nvd.nist.gov https://www.debian.org/security/2021/dsa-4949 https://github.com/zubrahzz/FluentD-TD-agent-Exploit-CVE-2020-28169

CVE-2020-28169

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect