jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with []string{} for m["aud"] (which is allowed by the specification). Because the type assertion fails, "" is the value of aud. This is a security problem if the JWT token is presented to a service that lacks its own audience check.

The version of dcos-cli installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-26160 advisory.

  - jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with     []string{} for m[aud] (which is allowed by the specification). Because the type assertion fails,  is     the value of aud. This is a security problem if the JWT token is presented to a service that lacks its own     audience check. (CVE-2020-26160)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with     []string{} for m[aud] (which is allowed by the specification). Because the type assertion fails,  is     the value of aud. This is a security problem if the JWT token is presented to a service that lacks its own     audience check. (CVE-2020-26160)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with
    []string{} for m["aud"] (which is allowed by the specification). Because the type assertion fails, "" is
    the value of aud. This is a security problem if the JWT token is presented to a service that lacks its own
    audience check. (CVE-2020-26160)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2042 advisory.

    Red Hat OpenShift Container Storage is software-defined storage integrated with and optimized for the Red     Hat OpenShift Container Platform. Red Hat OpenShift Container Storage is a highly scalable, production-     grade persistent storage for stateful applications running in the Red Hat OpenShift Container Platform. In     addition to persistent storage, Red Hat OpenShift Container Storage provisions a multicloud data     management service with an S3 compatible API.

    Security Fix(es):

    * jwt-go: access restriction bypass vulnerability (CVE-2020-26160)

    * golang: math/big: panic during recursive division of very large numbers (CVE-2020-28362)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    Space precludes documenting all of these changes in this advisory. Users are directed to the Red Hat     OpenShift Container Storage Release Notes for information on the most significant of these changes:

    https://access.redhat.com/documentation/en-us/red_hat_openshift_container_storage/4.7/html-     single/4.7_release_notes/index

    All Red Hat OpenShift Container Storage users are advised to upgrade to     these updated images.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
295973	Azure Linux 3.0 Security Update: dcos-cli (CVE-2020-26160)	Nessus	Azure Linux Local Security Checks	Local	high
251001	Linux Distros Unpatched Vulnerability : CVE-2020-26160	Nessus	Misc.	Local	high
419771	SCA: security update for github.com/dgrijalva/jwt-go/v4 (GHSA-w73w-5m7g-f7qc)	Tenable Cloud Security	SCA Checks	Local	high
419771	SCA: security update for github.com/dgrijalva/jwt-go/v4 (GHSA-w73w-5m7g-f7qc)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
210539	RHEL 8 : Red Hat OpenShift Container Storage 4.7 RPM (RHSA-2021:2042)	Nessus	Red Hat Local Security Checks	Local	high
404673	Alpine: multiple gitea packages: security update to 1.14.6-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	high
404673	Alpine: multiple gitea packages: security update to 1.14.6-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	high

Detections

Analytics

CVE-2020-26160

high

Tenable Plugins

high

high

high

high

high

high

high