Vulnerability · Published Apr 2, 2020 · Assigned by mitre

CVE-2020-11498

High 8.8

In plain English

A high-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.4% (higher than 89% of all known vulnerabilities).

Severity (CVSS NVD)8.8High

Exploit odds (30 days)3.4%top 11.1% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Slack Nebula through 1.1.0 contains a relative path vulnerability that allows a low-privileged attacker to execute code in the context of the root user via tun_darwin.go or tun_windows.go. A user can also use Nebula to execute arbitrary code in the user's own context, e.g., for user-level persistence or to bypass security controls. NOTE: the vendor states that this "requires a high degree of access and other preconditions that are tough to achieve."

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/slackhq/nebula/pull/191 x_refsource_MISC
http://www.pwn3d.org/posts/7918501-slack-nebula-relative-path-bug-bounty-disclosure x_refsource_MISC