CVE-2020-28002

2020-11-0221:15:30

Google

osv.dev

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

42.2%

JSON

In SonarQube 8.4.2.36762, an external attacker can achieve authentication bypass through SonarScanner. With an empty value for the -D sonar.login option, anonymous authentication is forced. This allows creating and overwriting public and private projects via the /api/ce/submit endpoint.

CPENameOperatorVersion
sonarqubeeq5.1
sonarqubeeq5.5-M7
sonarqubeeq3.2
sonarqubeeq4.4
sonarqubeeq5.1-RC1
sonarqubeeq6.2-RC3
sonarqubeeq5.5-M6
sonarqubeeq5.4-M5
sonarqubeeq5.5-M5
sonarqubeeq4.4-RC3

Name	Operator	Version
sonarqube	eq	5.1
sonarqube	eq	5.5-M7
sonarqube	eq	3.2
sonarqube	eq	4.4
sonarqube	eq	5.1-RC1
sonarqube	eq	6.2-RC3
sonarqube	eq	5.5-M6
sonarqube	eq	5.4-M5
sonarqube	eq	5.5-M5
sonarqube	eq	4.4-RC3