Vulnerability Name:

CVE-2020-7729 (CCN-187758)

Assigned:2020-08-20
Published:2020-08-20
Updated:2022-11-16
Summary:The package grunt before 1.3.0 are vulnerable to Arbitrary Code Execution due to the default usage of the function load() instead of its secure replacement safeLoad() of the package js-yaml inside grunt.file.readYAML.
CVSS v3 Severity:7.1 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H)
6.2 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): High
Privileges Required (PR): Low
User Interaction (UI): Required
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
7.1 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H)
6.2 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): High
Privileges Required (PR): Low
User Interaction (UI): Required
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:4.6 Medium (CVSS v2 Vector: AV:N/AC:H/Au:S/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): High
Authentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
7.1 High (CCN CVSS v2 Vector: AV:N/AC:H/Au:S/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): High
Athentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-1188
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2020-7729

Source: XF
Type: UNKNOWN
nodejs-cve20207729-code-exec(187758)

Source: CONFIRM
Type: Broken Link
N/A

Source: CCN
Type: grunt GIT Repository
Switch to use safeLoad for loading YML files via file.readYAML

Source: CONFIRM
Type: Patch, Third Party Advisory
N/A

Source: MLIST
Type: Mailing List, Third Party Advisory
[debian-lts-announce] 20200909 [SECURITY] [DLA 2368-1] grunt security update

Source: CCN
Type: SNYK-JAVA-ORGWEBJARSNPM-607922
Arbitrary Code Execution

Source: CONFIRM
Type: Third Party Advisory
N/A

Source: CONFIRM
Type: Exploit, Third Party Advisory
N/A

Source: UBUNTU
Type: Third Party Advisory
USN-4595-1

Source: CCN
Type: IBM Security Bulletin 6956539 (MobileFirst Platform Foundation)
Multiple vulnerabilities found with third-party libraries used by IBM MobileFirst Platform

Source: CCN
Type: IBM Security Bulletin 7008939 (Security Verify Governance)
Multiple vulnerabilities fixed in IBM Security Verify Governance - Identity Manager Virtual Appliance

Source: CCN
Type: NPM Web site
grunt

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2020-7729

Vulnerable Configuration:Configuration 1:
  • cpe:/a:gruntjs:grunt:*:*:*:*:*:node.js:*:* (Version < 1.3.0)

    • Configuration 2:
  • cpe:/o:debian:debian_linux:9.0:*:*:*:*:*:*:*

    • Configuration 3:
  • cpe:/o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

    • Configuration CCN 1:
  • cpe:/a:nodejs:node.js:*:*:*:*:-:*:*:*
  • OR cpe:/a:ibm:mobilefirst_platform_foundation:8.0.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:ibm:security_verify_governance:10.0:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    gruntjs grunt *
    debian debian linux 9.0
    canonical ubuntu linux 18.04
    nodejs node.js *
    ibm mobilefirst platform foundation 8.0.0.0
    ibm security verify governance 10.0