Detections
Analytics
Atlassian SourceTree 1.2 < 3.1.1 Multiple remote code execution vulnerabilities
critical Nessus Plugin ID 124411
Language:
Synopsis
The version of Atlassian SourceTree installed on the remote Windows host is affected by multiple remote code execution vulnerabilities.Description
The version of Atlassian SourceTree installed on the remote Windows host is version 1.2 prior to 3.1.1. It is, therefore, affected by multiple remote code execution vulnerabilities.- An option injection vulnerability exists in the git submodule component. An unauthenticated, remote attacker can exploit this via the processing of a recursive git clone of a project with a specially crafted .gitmodules file, to execute arbitrary commands. (CVE-2018-17456)
- An argument injection vulnerability exists in the Mercurial repository component. An authenticated, remote attacker can exploit this via filenames in the Mercurial repositories to execute arbitrary commands. (CVE-2018-20234, CVE-2018-20235)
- A command injection vulnerability exists in the URI handling component. An unauthenticated, remote attacker could exploit this via sending a malicious URI to a victim to execution arbitrary commands. (CVE-2018-20236)
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Upgrade to Atlassian SourceTree 3.1.1 or later.See Also
Plugin Details
Severity: Critical
ID: 124411
File Name: atlassian_sourcetree_3_1_1_macosx.nasl
Version: 1.4
Type: local
Agent: macosx
Family: MacOS X Local Security Checks
Published: 4/30/2019
Updated: 5/20/2022
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.4
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 7.7
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2018-20236
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 9.1
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C
CVSS Score Source: CVE-2018-17456
Vulnerability Information
CPE: cpe:/a:atlassian:sourcetree
Required KB Items: Host/MacOSX/Version, installed_sw/SourceTree
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 3/6/2019
Vulnerability Publication Date: 3/6/2019
Exploitable With
Metasploit (Malicious Git HTTP Server For CVE-2018-17456)
Reference Information
CVE: CVE-2018-17456, CVE-2018-20234, CVE-2018-20235, CVE-2018-20236