OS Command Injection in node-notifier - CVE-2020-7789

Vulnerability identifier: #VU55499

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-7789

CWE-ID: CWE-78

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary shell commands on the target system.

The vulnerability exists due to improper input validation. A remote unauthenticated attacker can pass specially crafted data to the application and execute arbitrary OS commands on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

node-notifier
Ansible Automation Platform
IBM Spectrum Protect Plus
IBM Watson Machine Learning Accelerator
python-galaxy-importer (Red Hat package)
python-pulp-ansible (Red Hat package)
python-bleach-allowlist (Red Hat package)
python-bleach (Red Hat package)
automation-hub (Red Hat package)
python-galaxy-ng (Red Hat package)
IBM Cognos Analytics

Install updates from vendor's website.

node-notifier - addressed in versions 5.4.5, 8.0.2, 9.0.1
IBM Spectrum Protect Plus - update to 10.1.17.1
python-galaxy-importer (Red Hat package) - addressed in versions 0.2.15-1.el7pc, 0.2.15-1.el8pc
python-pulp-ansible (Red Hat package) - addressed in versions 0.5.6-1.el7pc, 0.5.6-1.el8pc
python-bleach-allowlist (Red Hat package) - addressed in versions 1.0.3-1.el7pc, 1.0.3-1.el8pc
python-bleach (Red Hat package) - addressed in versions 3.3.0-1.el7pc, 3.3.0-1.el8pc
automation-hub (Red Hat package) - addressed in versions 4.2.2-1.el7pc, 4.2.2-1.el8pc
python-galaxy-ng (Red Hat package) - addressed in versions 4.2.2-1.el7pc, 4.2.2-1.el8pc
IBM Cognos Analytics - addressed in versions 11.1.7.6, 11.2.4.1 IF1

• https://github.com/mikaelbr/node-notifier/blob/master/lib/utils.js%23L303
• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1050371
• https://snyk.io/vuln/SNYK-JS-NODENOTIFIER-1035794

• OS command injection in node-notifier
• Multiple vulnerabilities in Red Hat Ansible Automation Platform
• Multiple vulnerabilities in IBM Cognos Analytics
• Multiple vulnerabilities in IBM Watson Machine Learning Accelerator on Cloud Pak for Data
• Multiple vulnerabilities in IBM Spectrum Protect Plus