CVE-2020-36911

Sažetak

Covenant 0.1.3 - 0.5 contains a remote code execution vulnerability that allows attackers to craft malicious JWT tokens with administrative privileges. Attackers can generate forged tokens with admin roles and upload custom DLL payloads to execute arbitrary commands on the target system.

Reference

https://cobbr.io/Covenant.html
https://github.com/Zeop-CyberSec/covenant_rce/blob/master/covenant_jwt_rce.rb
https://github.com/cobbr/Covenant
https://web.archive.org/web/20201013165001/https://twitter.com/cobbr_io/status/1316058367161401344
https://web.archive.org/web/20201101052547/https://blog.null.farm/hunting-the-hunters
https://www.exploit-db.com/exploits/51141
https://www.vulncheck.com/advisories/covenant-remote-code-execution-rce
https://github.com/Zeop-CyberSec/covenant_rce/blob/master/covenant_jwt_rce.rb
https://web.archive.org/web/20201101052547/https://blog.null.farm/hunting-the-hunters

CVSS

Base:	9.8
Impact:	5.9
Exploitability:	3.9

Pristup

Vektor	Složenost	Autentikacija
NETWORK	LOW	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
HIGH	HIGH	HIGH

CVSS vektor

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Zadnje važnije ažuriranje

14-01-2026 - 20:15

Objavljeno

13-01-2026 - 23:15