CVE-2020-28002

2020-10-3002:06:43

mitre

www.cve.org

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.2%

JSON

In SonarQube 8.4.2.36762, an external attacker can achieve authentication bypass through SonarScanner. With an empty value for the -D sonar.login option, anonymous authentication is forced. This allows creating and overwriting public and private projects via the /api/ce/submit endpoint.

References

csl.com.co/sonarqube-auditando-al-auditor-parte-ii/