An issue was discovered in the selinux-policy (aka Reference Policy) package 3.14 through 2020-08-24 because the .config/Yubico directory is mishandled. Consequently, when SELinux is in enforced mode, pam-u2f is not allowed to read the user's U2F configuration file. If configured with the nouserok option (the default when configured by the authselect tool), and that file cannot be read, the second factor is disabled. An attacker with only the knowledge of the password can then log in, bypassing 2FA.

An update of the selinux package has been released.

According to the versions of the selinux-policy packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in the selinux-policy (aka Reference Policy) package 3.14 through 2020-08-24     because the .config/Yubico directory is mishandled. Consequently, when SELinux is in enforced mode,     pam-u2f is not allowed to read the user's U2F configuration file. If configured with the nouserok option     (the default when configured by the authselect tool), and that file cannot be read, the second factor is     disabled. An attacker with only the knowledge of the password can then log in, bypassing 2FA.
    (CVE-2020-24612)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the selinux-policy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in the selinux-policy (aka Reference Policy) package 3.14 through 2020-08-24     because the .config/Yubico directory is mishandled. Consequently, when SELinux is in enforced mode,     pam-u2f is not allowed to read the user's U2F configuration file. If configured with the nouserok option     (the default when configured by the authselect tool), and that file cannot be read, the second factor is     disabled. An attacker with only the knowledge of the password can then log in, bypassing 2FA.
    (CVE-2020-24612)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
203297	Photon OS 4.0: Selinux PHSA-2021-4.0-0140	Nessus	PhotonOS Local Security Checks	medium
165374	EulerOS Virtualization 2.9.0 : selinux-policy (EulerOS-SA-2022-2402)	Nessus	Huawei Local Security Checks	medium
165362	EulerOS Virtualization 2.9.1 : selinux-policy (EulerOS-SA-2022-2366)	Nessus	Huawei Local Security Checks	medium
163544	EulerOS 2.0 SP10 : selinux-policy (EulerOS-SA-2022-2171)	Nessus	Huawei Local Security Checks	medium
163526	EulerOS 2.0 SP10 : selinux-policy (EulerOS-SA-2022-2146)	Nessus	Huawei Local Security Checks	medium
163203	EulerOS Virtualization 2.10.0 : selinux-policy (EulerOS-SA-2022-2102)	Nessus	Huawei Local Security Checks	medium
163170	EulerOS Virtualization 2.10.1 : selinux-policy (EulerOS-SA-2022-2122)	Nessus	Huawei Local Security Checks	medium
162896	EulerOS 2.0 SP9 : selinux-policy (EulerOS-SA-2022-2012)	Nessus	Huawei Local Security Checks	medium
162878	EulerOS 2.0 SP9 : selinux-policy (EulerOS-SA-2022-1982)	Nessus	Huawei Local Security Checks	medium

Detections

Analytics

CVE-2020-24612

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium