There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character `|`.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:3212-1 advisory.

  - There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a     filename that begins with the pipe character `|`. (CVE-2020-8130)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a     filename that begins with the pipe character `|`. (CVE-2020-8130)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4702 advisory.

    Red Hat Satellite is a systems management tool for Linux-based     infrastructure. It allows for provisioning, remote management, and     monitoring of multiple Linux deployments with a single centralized tool.

    Security Fix(es):
    * python-ecdsa: Unexpected and undocumented exceptions during signature decoding (CVE-2019-14853)
    * python-ecdsa: DER encoding is not being verified in signatures (CVE-2019-14859)
    * rubygem-activerecord-session_store: hijack sessions by using timing attacks targeting the session id     (CVE-2019-25025)
    * rake: OS Command Injection via egrep in Rake::FileList (CVE-2020-8130)
    * candlepin: guava - local information disclosure via temporary directory created with unsafe permissions     (CVE-2020-8908)
    * PyYAML: incomplete fix for CVE-2020-1747 (CVE-2020-14343)
    * tfm-rubygem-nokogiri: XML external entity injection via Nokogiri::XML::Schema (CVE-2020-26247)
    * tfm-rubygem-foreman_azure_rm: Azure compute resource secret_key leak to authenticated users     (CVE-2021-3413)
    * foreman: possible man-in-the-middle in smart_proxy realm_freeipa (CVE-2021-3494)
    * foreman: BMC controller credential leak via API (CVE-2021-20256)
    * python-aiohttp: Open redirect in aiohttp.web_middlewares.normalize_path_middleware (CVE-2021-21330)
    * rubygem-actionpack: Possible Information Disclosure / Unintended Method Execution in Action Pack     (CVE-2021-22885)
    * tfm-rubygem-actionpack: rails: Possible Denial of Service vulnerability in Action Dispatch     (CVE-2021-22902)
    * tfm-rubygem-actionpack: Possible DoS Vulnerability in Action Controller Token Authentication     (CVE-2021-22904)
    * python-django: potential directory-traversal via uploaded files (CVE-2021-28658)
    * tfm-rubygem-puma: incomplete fix for CVE-2019-16770 allows Denial of Service (DoS) (CVE-2021-29509)
    * python-django: Potential directory-traversal via uploaded files (CVE-2021-31542)
    * tfm-rubygem-addressable: ReDoS in templates (CVE-2021-32740)
    * python-django: Potential directory traversal via ``admindocs`` (CVE-2021-33203)
    * python-urllib3: ReDoS in the parsing of authority part of URL (CVE-2021-33503)
    * python-django: Possible indeterminate SSRF, RFI, and LFI attacks since validators accepted leading zeros     in IPv4 addresses (CVE-2021-33571)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page(s) listed in the References section.

    Additional Changes:

    * Updated Content Management backend with Pulp 3 for increased performance, scale and reliability. MongoDB     is also removed from Satellite
    * Adds support for Azure GovCloud
    * Provides Satellite 6.10 Server support for Satellite 6.9 Capsules
    * Improves support for Satellite Air Gapped and Disconnected environments
    * Adds Ansible Collections content type to support disconnected environments
    * Foreman_webhooks introduced to replace foreman_hooks
    * Introduces UI to manage Personal Access Tokens
    * Adds ability to configure Pulp repository synchronization timeouts
    * Support for Convert2RHEL
    * Provides advanced options when registering a host
    * Supports remediation playbook signatures from console.redhat.com
    * Red Hat Insights Plugin replaced through new integration within Satellite
    * Ability to visually represent systems registered and in sync with Insights
    * Ability to verify if required packages are installed as part of pre-upgrade check
    * Ability to unset environment variables when installer is running
    * Ability to turn backups on and off when cleaning up tasks from database

    The items above are not a complete list of changes. This update also fixes     several bugs and adds various enhancements. Documentation for these changes     is available from the Release Notes document linked to in the References     section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the ruby packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Onigmo through 6.2.0 has a NULL pointer dereference in     onig_error_code_to_str because of fetch_token in     regparse.c.(CVE-2019-16161)

  - Onigmo through 6.2.0 has an out-of-bounds read in     parse_char_class because of missing codepoint     validation in regenc.c.(CVE-2019-16162)

  - An issue was discovered in Ruby through 2.5.8, 2.6.x     through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a     simple HTTP server bundled with Ruby, had not checked     the transfer-encoding header value rigorously. An     attacker may potentially exploit this issue to bypass a     reverse proxy (which also has a poor header check),     which may lead to an HTTP Request Smuggling     attack.(CVE-2020-25613)

  - There is an OS command injection vulnerability in Ruby     Rake < 12.3.3 in Rake::FileList when supplying a     filename that begins with the pipe character     `|`.(CVE-2020-8130)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the ruby packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - There is an OS command injection vulnerability in Ruby     Rake < 12.3.3 in Rake::FileList when supplying a     filename that begins with the pipe character     `|`.(CVE-2020-8130)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the ruby packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - The JSON gem through 2.2.0 for Ruby, as used in Ruby     2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through     2.6.5, has an Unsafe Object Creation Vulnerability.
    This is quite similar to CVE-2013-0269, but does not     rely on poor garbage-collection behavior within Ruby.
    Specifically, use of JSON parsing methods can lead to     creation of a malicious object within the interpreter,     with adverse effects that are     application-dependent.(CVE-2020-10663)

  - There is an OS command injection vulnerability in Ruby     Rake < 12.3.3 in Rake::FileList when supplying a     filename that begins with the pipe character     `|`.(CVE-2020-8130)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - There is an OS command injection vulnerability in Ruby     Rake < 12.3.3 in Rake::FileList when supplying a     filename that begins with the pipe character     `|`.(CVE-2020-8130)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of rubygem24-rake installed on the remote host is prior to 12.0.0-1.49. It is, therefore, affected by a vulnerability as referenced in the ALAS-2020-1385 advisory.

    There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a     filename that begins with the pipe character `|`. (CVE-2020-8130)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS-2020-1384 advisory.

    There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a     filename that begins with the pipe character `|`. (CVE-2020-8130)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A security flaw is found on rake which may case arbitrary command execution under file existence with crafted name. This new rpm will fix the issue (CVE-2020-8130)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for ruby2.5 toversion 2.5.7 fixes the following issues:
&#9; ruby 2.5 was updated to version 2.5.7 

  - CVE-2020-8130: Fixed a command injection in intree copy     of rake (bsc#1164804).

  - CVE-2019-16255: Fixed a code injection vulnerability of     Shell#[] and Shell#test (bsc#1152990).

  - CVE-2019-16254: Fixed am HTTP response splitting in     WEBrick (bsc#1152992).

  - CVE-2019-15845: Fixed a null injection vulnerability of     File.fnmatch and File.fnmatch? (bsc#1152994).

  - CVE-2019-16201: Fixed a regular expression denial of     service of WEBrick Digest access authentication     (bsc#1152995).

  - CVE-2012-6708: Fixed an XSS in JQuery

  - CVE-2015-9251: Fixed an XSS in JQuery

  - Fixed unit tests (bsc#1140844)

  - Removed some unneeded test files (bsc#1162396).

This update was imported from the SUSE:SLE-15:Update update project.

This update for ruby2.5 toversion 2.5.7 fixes the following issues :

ruby 2.5 was updated to version 2.5.7

CVE-2020-8130: Fixed a command injection in intree copy of rake (bsc#1164804).

CVE-2019-16255: Fixed a code injection vulnerability of Shell#[] and Shell#test (bsc#1152990).

CVE-2019-16254: Fixed am HTTP response splitting in WEBrick (bsc#1152992).

CVE-2019-15845: Fixed a null injection vulnerability of File.fnmatch and File.fnmatch? (bsc#1152994).

CVE-2019-16201: Fixed a regular expression denial of service of WEBrick Digest access authentication (bsc#1152995).

CVE-2012-6708: Fixed an XSS in JQuery

CVE-2015-9251: Fixed an XSS in JQuery

Fixed unit tests (bsc#1140844)

Removed some unneeded test files (bsc#1162396).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4295-1 advisory.

    It was discovered that Rake incorrectly handled certain files. An attacker could use this issue to     possibly execute arbitrary commands.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

There is an OS command injection vulnerability in Rake (a ruby make-like utility) < 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character `|`.

For Debian 8 'Jessie', this problem has been fixed in version 10.3.2-2+deb8u1.

We recommend that you upgrade your rake packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
164900	SUSE SLES12 Security Update : rubygem-rake (SUSE-SU-2022:3212-1)	Nessus	SuSE Local Security Checks	medium
157187	EulerOS 2.0 SP9 : ruby (EulerOS-SA-2022-1016)	Nessus	Huawei Local Security Checks	medium
157174	EulerOS 2.0 SP9 : ruby (EulerOS-SA-2022-1036)	Nessus	Huawei Local Security Checks	medium
155377	RHEL 7 : Satellite 6.10 Release (Moderate) (RHSA-2021:4702)	Nessus	Red Hat Local Security Checks	high
151390	EulerOS Virtualization 3.0.2.2 : ruby (EulerOS-SA-2021-2167)	Nessus	Huawei Local Security Checks	high
142565	EulerOS Virtualization 3.0.6.6 : ruby (EulerOS-SA-2020-2460)	Nessus	Huawei Local Security Checks	medium
140325	EulerOS Virtualization for ARM 64 3.0.2.0 : ruby (EulerOS-SA-2020-1955)	Nessus	Huawei Local Security Checks	high
140165	EulerOS 2.0 SP5 : ruby (EulerOS-SA-2020-1944)	Nessus	Huawei Local Security Checks	medium
138057	Amazon Linux AMI : rubygem24-rake (ALAS-2020-1385)	Nessus	Amazon Linux Local Security Checks	medium
138056	Amazon Linux AMI : rubygem-rake (ALAS-2020-1384)	Nessus	Amazon Linux Local Security Checks	medium
135999	Fedora 31 : rubygem-rake (2020-dc1ae17bb5)	Nessus	Fedora Local Security Checks	medium
135989	Fedora 30 : rubygem-rake (2020-28e06b5f08)	Nessus	Fedora Local Security Checks	medium
135161	openSUSE Security Update : ruby2.5 (openSUSE-2020-395)	Nessus	SuSE Local Security Checks	high
134824	SUSE SLED15 / SLES15 Security Update : Recommended update for ruby2.5 (SUSE-SU-2020:0737-1)	Nessus	SuSE Local Security Checks	high
134300	Ubuntu 16.04 LTS / 18.04 LTS : Rake vulnerability (USN-4295-1)	Nessus	Ubuntu Local Security Checks	medium
134093	Debian DLA-2120-1 : rake security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2020-8130

medium

Tenable Plugins

medium

medium

medium

high

high

medium

high

medium

medium

medium

medium

medium

high

high

medium

medium