In the Channelmgnt plug-in for Sopel (a Python IRC bot) before version 1.0.3, malicious users are able to op/voice and take over a channel. This is an ACL bypass vulnerability. This plugin is bundled with MirahezeBot-Plugins with versions from 9.0.0 and less than 9.0.2 affected. Version 9.0.2 includes 1.0.3 of channelmgnt, and thus is safe from this vulnerability. See referenced GHSA-23pc-4339-95vg.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Channelmgnt plug-in for Sopel (a Python IRC bot) before version 1.0.3, malicious users are able to     op/voice and take over a channel. This is an ACL bypass vulnerability. This plugin is bundled with     MirahezeBot-Plugins with versions from 9.0.0 and less than 9.0.2 affected. Version 9.0.2 includes 1.0.3 of     channelmgnt, and thus is safe from this vulnerability. See referenced GHSA-23pc-4339-95vg.
    (CVE-2020-15251)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In the Channelmgnt plug-in for Sopel (a Python IRC bot) before version 1.0.3, malicious users are able to
    op/voice and take over a channel. This is an ACL bypass vulnerability. This plugin is bundled with
    MirahezeBot-Plugins with versions from 9.0.0 and less than 9.0.2 affected. Version 9.0.2 includes 1.0.3 of
    channelmgnt, and thus is safe from this vulnerability. See referenced GHSA-23pc-4339-95vg.
    (CVE-2020-15251)

ID	Name	Product	Family	Type	Severity
262921	Linux Distros Unpatched Vulnerability : CVE-2020-15251	Nessus	Misc.	Local	medium
416054	SCA: security update for sopel-plugins-channelmgnt, sopel_plugins.channelmgnt (GHSA-j257-jfvv-h3x5)	Tenable Cloud Security	SCA Checks	Local	medium
416054	SCA: security update for sopel-plugins-channelmgnt, sopel_plugins.channelmgnt (GHSA-j257-jfvv-h3x5)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium

Detections

Analytics

CVE-2020-15251

medium

Tenable Plugins

medium

medium

medium