CVE-2020-27986

high · 7.5

A public exploit / detection template exists

Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →

SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. NOTE: reportedly, the vendor's position for SMTP and SVN is "it is the administrator's responsibility to configure it.

7.5

CVSS

16.0%

EPSS (exploit prob.)

97th

EPSS percentile

2020-10-28

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses

CWE-306CWE-312

Affected products

Vendor	Product	Affected versions
sonarsource	sonarqube	8.4.2.36762

Check a specific version with /api/v1/cve/match.

References

https://csl.com.co/sonarqube-auditando-al-auditor-parte-i/
https://csl.com.co/sonarqube-auditando-al-auditor-parte-i/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2020-27986