Lucene search
Veracode Vulnerability DatabaseVERACODE:28961HistoryJan 11, 2021 - 8:53 p.m.
Authorization Bypass
2021-01-1120:53:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
authorization bypass
coturn
vulnerable software
EPSS
0.002
Percentile
56.7%
coturn is vulnerable to authorization bypass. An attacker is able to bypass validation to connect and relay packets to the loopback address.
References
github.com/coturn/coturn/blob/57180ab60afcaeb13537e69ae8cb8aefd8f3f546/ChangeLog#L48
github.com/coturn/coturn/commit/abfe1fd08d78baa0947d17dac0f7411c3d948e4d
github.com/coturn/coturn/security/advisories/GHSA-6g6j-r9rf-cm7p
lists.fedoraproject.org/archives/list/[email protected]/message/G54UIUFTEC6RLPOISMB6FUW7456SBZC4/
lists.fedoraproject.org/archives/list/[email protected]/message/M4CJOPAQT43MYAFU3UROGLEXN3Z6RS4H/
security-tracker.debian.org/tracker/CVE-2020-26262
ubuntu.com/security/CVE-2020-26262
Related
openvas
openvas
Debian: Security Advisory (DLA-2522-1)
2021-01-13 00:00:00
coturn < 4.5.2 Loopback Bypass Vulnerability
2021-01-20 00:00:00
Mageia: Security Advisory (MGASA-2021-0087)
2022-01-28 00:00:00
nessus
nessus
Fedora 32 : coturn (2021-32d0068851)
2021-01-20 00:00:00
Fedora 33 : coturn (2021-dee141fc61)
2021-01-20 00:00:00
Debian DSA-4829-1 : coturn - security update
2021-01-12 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: coturn-4.5.2-1.fc33
2021-01-20 01:33:03
[SECURITY] Fedora 32 Update: coturn-4.5.2-1.fc32
2021-01-20 01:28:22
ubuntucve
ubuntucve
CVE-2020-26262
2021-01-11 00:00:00
prion
prion
Design/Logic Flaw
2021-01-13 19:15:00
cvelist
cvelist
CVE-2020-26262 Loopback bypass in Coturn
2021-01-13 18:15:17
ubuntu
ubuntu
coTURN vulnerability
2021-01-11 00:00:00
cve
cve
CVE-2020-26262
2021-01-13 19:15:16
alpinelinux
alpinelinux
CVE-2020-26262
2021-01-13 19:15:16
debian
debian
[SECURITY] [DLA 2522-1] coturn security update
2021-01-12 08:47:33
[SECURITY] [DSA 4829-1] coturn security update
2021-01-11 13:57:27
[SECURITY] [DSA 4829-1] coturn security update
2021-01-11 13:57:27
debiancve
debiancve
CVE-2020-26262
2021-01-13 19:15:16
nvd
nvd
CVE-2020-26262
2021-01-13 19:15:16
packetstorm
packetstorm
Coturn 4.5.1.x Access Control Bypass
2021-01-11 00:00:00
redhatcve
redhatcve
CVE-2020-26262
2022-05-20 23:57:46
osv
osv
coturn vulnerability
2021-01-11 21:19:33
coturn - security update
2021-01-12 00:00:00
coturn - security update
2021-01-11 00:00:00
archlinux
archlinux
[ASA-202101-21] coturn: insufficient validation
2021-01-12 00:00:00
mageia
mageia
Updated coturn package fixes a security vulnerability
2021-02-19 13:27:54
zdt
zdt
Coturn 4.5.1.x Access Control Bypass Vulnerability
2021-01-11 00:00:00