← Back

CVE-2019-20916

nvd nist
Published: Sep 4, 2020Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.

Affected (7)

Products: Pypa: Pip · Opensuse: Leap · Debian: Debian Linux · +1 more
Show all products
Pypa: Pip · Opensuse: Leap · Debian: Debian Linux · Oracle: Communications Cloud Native Core Network Function Cloud Native Environment, Communications Cloud Native Core Policy
Pypa
1 product
Pip
Opensuse
1 product
Leap
Debian
1 product
Debian Linux
Oracle
2 products
Communications Cloud Native Core Network Function Cloud Native Environment
Communications Cloud Native Core Policy
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Pip
Before 19.2
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Opensuse
Leap
Version 15.1
Leap
Version 15.2
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Debian Linux
Version 9.0
Configuration D
3 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Communications Cloud Native Core Network Function Cloud Native Environment
Version 1.10.0
Communications Cloud Native Core Network Function Cloud Native Environment
Version 22.1.0
Communications Cloud Native Core Policy
Version 1.15.0

Related CWEs

CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (16)

Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Patch
Source: cve@mitre.org
Patch
Source: cve@mitre.org
ExploitPatch
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory

Timeline

No history available yet.