CVE-2020-26214

high-risk
Published 2020-11-06

In Alerta before version 8.1.0, users may be able to bypass LDAP authentication if they provide an empty password when Alerta server is configure to use LDAP as the authorization provider. Only deployments where LDAP servers are configured to allow unauthenticated authentication mechanism for anonymous authorization are affected. A fix has been implemented in version 8.1.0 that returns HTTP 401 Unauthorized response for any authentication attempts where the password field is empty. As a workaround LDAP administrators can disallow unauthenticated bind requests by clients.

Do I need to act?

!
88.9% chance of exploitation in next 30 days
EPSS score — higher than 11% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.1/10 Critical
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Alerta Project

References (12)

Patch https://github.com/alerta/alerta/commit/2bfa31779a4c9df2fa68fa4d0c5c909698c5ef65
Third Party Advisory https://github.com/alerta/alerta/issues/1277
Third Party Advisory https://github.com/alerta/alerta/pull/1345
Third Party Advisory https://github.com/alerta/alerta/security/advisories/GHSA-5hmm-x8q8-w5jh
Third Party Advisory https://pypi.org/project/alerta-server/8.1.0/
Third Party Advisory https://tools.ietf.org/html/rfc4513#section-5.1.2
Patch https://github.com/alerta/alerta/commit/2bfa31779a4c9df2fa68fa4d0c5c909698c5ef65
Third Party Advisory https://github.com/alerta/alerta/issues/1277
Third Party Advisory https://github.com/alerta/alerta/pull/1345
Third Party Advisory https://github.com/alerta/alerta/security/advisories/GHSA-5hmm-x8q8-w5jh
Third Party Advisory https://pypi.org/project/alerta-server/8.1.0/
Third Party Advisory https://tools.ietf.org/html/rfc4513#section-5.1.2
56
/ 100
high-risk
Severity 31/34 · Critical
Exploitability 20/34 · Moderate
Exposure 5/34 · Minimal