CVE-2020-8903 — Incorrect Default Permissions in LLC Guest-oslogin

CWE-276 — Incorrect Default Permissions4 documents4 sources
Severity
7.3HIGHNVD
EPSS
0.1%
top 74.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Google LLC Guest-osloginGoogle Guest-osloginOpensuse Leap
Timeline
PublishedJun 22
Latest updateMay 24

Description

A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Using their membership to the "adm" group, users with this role are able to read the DHCP XID from the systemd journal. Using the DHCP XID, it is then possible to set the IP address and hostname of the instance to any value, which is then stored in /etc/hosts. An attacker can then point metadata.google.…

CVSS vector

CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Affected Packages3 packages

▶CVEListV5google_llc/guest-oslogin20190304 — 20200507
▶NVDgoogle/guest-oslogin20190304.00 — 20200507.00
▶NVDopensuse/leap15.1, 15.2+1

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-29mh-jw46-2rf9: A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/com↗2022-05-24
▶
OSV
CVE-2020-8903: A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/com↗2020-06-22
▶
CVEList
Priviged Escalation in Google Cloud Platform's Guest-OSLogin↗2020-06-22
▶
CVE-2020-8903 — Incorrect Default Permissions | cvebase