Lucene search

GitHub Advisory DatabaseGHSA-C3MP-9VX3-2RVV

HistoryMay 24, 2022 - 5:42 p.m.

OpenNMS Horizon RCE via JEXL2 expression

2022-05-2417:42:35

CWE-863

GitHub Advisory Database

github.com

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

61.5%

JSON

OpenNMS Meridian 2016, 2017, 2018 before 2018.1.25, 2019 before 2019.1.16, and 2020 before 2020.1.5, Horizon 1.2 through 27.0.4, and Newts <1.5.3 has Incorrect Access Control, which allows local and remote code execution using JEXL expressions.

Affected configurations

Vulners

Node

org.opennms\opennmsMatchutil

org.opennms\opennmsMatchprovision

org.opennms.features\Matchorg.opennms.features.measurements

org.opennms\Matchopennms

CPENameOperatorVersion
org.opennms:opennms-utilge16.0.0
org.opennms:opennms-utille27.0.3
org.opennms:opennms-provisionge16.0.0
org.opennms:opennms-provisionle27.0.3
org.opennms.features:org.opennms.features.measurementsge16.0.0
org.opennms.features:org.opennms.features.measurementsle27.0.3
org.opennms:opennmsge16.0.0
org.opennms:opennmsle27.0.3

Name	Operator	Version
org.opennms:opennms-util	ge	16.0.0
org.opennms:opennms-util	le	27.0.3
org.opennms:opennms-provision	ge	16.0.0
org.opennms:opennms-provision	le	27.0.3
org.opennms.features:org.opennms.features.measurements	ge	16.0.0
org.opennms.features:org.opennms.features.measurements	le	27.0.3
org.opennms:opennms	ge	16.0.0
org.opennms:opennms	le	27.0.3

References

github.com/advisories/GHSA-c3mp-9vx3-2rvv

github.com/OpenNMS/opennms/pull/3281

issues.opennms.org/browse/NMS-13103

nvd.nist.gov/vuln/detail/CVE-2021-3396

www.opennms.com/en/blog/2021-02-16-cve-2021-3396-full-security-disclosure/

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

61.5%

JSON

Related for GHSA-C3MP-9VX3-2RVV