Lucene search
Cloud FoundryCFOUNDRY:4454558BC87161C2D16F8EB58EB59E07HistoryMar 10, 2020 - 12:00 a.m.
USN-4295-1: Rake vulnerability | Cloud Foundry
2020-03-1000:00:00
Cloud Foundry
www.cloudfoundry.org
14
0.001 Low
EPSS
Percentile
36.6%
Severity
Medium
Vendor
Canonical Ubuntu
Versions Affected
- Canonical Ubuntu 18.04
Description
It was discovered that Rake incorrectly handled certain files. An attacker could use this issue to possibly execute arbitrary commands.
CVEs contained in this USN include: CVE-2020-8130.
Affected Cloud Foundry Products and Versions
Severity is medium unless otherwise noted.
- cflinuxfs3
- All versions prior to 0.167.0
- CF Deployment
- All versions prior to v12.36.0
Mitigation
Users of affected products are strongly encouraged to follow the mitigations below. The Cloud Foundry project recommends upgrading the following releases:
- cflinuxfs3
- Upgrade All versions to 0.167.0 or greater
- CF Deployment
- Upgrade All versions to v12.36.0 or greater
References
History
2020-03-03: Initial vulnerability report published.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cflinuxfs3 | lt | 0.167.0 |
Related
fedora
fedora
[SECURITY] Fedora 31 Update: rubygem-rake-12.3.3-200.fc31
2020-04-27 04:47:55
[SECURITY] Fedora 30 Update: rubygem-rake-12.3.3-200.fc30
2020-04-27 03:06:55
veracode
veracode
OS Command Injection
2020-02-26 04:45:34
osv
osv
CVE-2020-8130
2020-02-24 15:15:11
OS Command Injection in Rake
2020-02-28 16:54:36
rake - security update
2020-02-26 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2020-0121)
2022-01-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:3212-1)
2022-09-09 00:00:00
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2022-1036)
2022-01-28 00:00:00
cve
cve
CVE-2020-8130
2020-02-24 15:15:11
nessus
nessus
Fedora 31 : rubygem-rake (2020-dc1ae17bb5)
2020-04-27 00:00:00
SUSE SLES12 Security Update : rubygem-rake (SUSE-SU-2022:3212-1)
2022-09-09 00:00:00
EulerOS 2.0 SP9 : ruby (EulerOS-SA-2022-1016)
2022-01-28 00:00:00
mageia
mageia
Updated ruby-rake packages fix security vulnerability
2020-03-06 19:13:58
redhatcve
redhatcve
CVE-2020-8130
2020-03-23 17:31:40
nvd
nvd
CVE-2020-8130
2020-02-24 15:15:11
amazon
amazon
Medium: rubygem-rake
2020-06-23 06:05:00
Medium: rubygem24-rake
2020-06-23 06:06:00
hackerone
hackerone
Ruby: OS Command Injection via egrep in Rake::FileList
2019-07-20 04:16:53
prion
prion
Command injection
2020-02-24 15:15:00
ubuntucve
ubuntucve
CVE-2020-8130
2020-02-24 00:00:00
debian
debian
[SECURITY] [DLA 2120-1] rake security update
2020-02-26 21:33:22
debiancve
debiancve
CVE-2020-8130
2020-02-24 15:15:11
ubuntu
ubuntu
Rake vulnerability
2020-03-03 00:00:00
github
github
OS Command Injection in Rake
2020-02-28 16:54:36
cvelist
cvelist
CVE-2020-8130
2020-02-24 14:41:26
suse
suse
Recommended update for ruby2.5 (important)
2020-03-28 00:00:00
redhat
redhat
(RHSA-2021:4702) Moderate: Satellite 6.10 Release
2021-11-16 13:58:57