CVE-2020-26261

user-readable api tokens in systemd units

Severity Score

7.9

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

jupyterhub-systemdspawner enables JupyterHub to spawn single-user notebook servers using systemd. In jupyterhub-systemdspawner before version 0.15 user API tokens issued to single-user servers are specified in the environment of systemd units. These tokens are incorrectly accessible to all users. In particular, the-littlest-jupyterhub is affected, which uses systemdspawner by default. This is patched in jupyterhub-systemdspawner v0.15

jupyterhub-systemdspawner permite que JupyterHub genere servidores de portátiles de un solo usuario utilizando systemd. En jupyterhub-systemdspawner, versiones anteriores a 0.15, los tokens de la API de usuario emitidos a servidores de un solo usuario son especificados en el entorno de las unidades systemd. Estos tokens son incorrectamente accesibles para todos los usuarios. En particular, está afectado the-littlest-jupyterhub, que usa systemdspawner por defecto. Esto está parcheado en jupyterhub-systemdspawner versión v0.15

*Credits: N/A

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

None

Attack Vector

Local

Attack Complexity

Medium

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2020-10-01 CVE Reserved
2020-12-09 CVE Published
2023-03-08 EPSS Updated
2024-08-04 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-668: Exposure of Resource to Wrong Sphere

CAPEC

References (4)

URL	Tag	Source
https://github.com/jupyterhub/systemdspawner/blob/master/CHANGELOG.md#v015	Release Notes
https://github.com/jupyterhub/systemdspawner/security/advisories/GHSA-cg54-gpgr-4rm6	Third Party Advisory
https://pypi.org/project/jupyterhub-systemdspawner	Product

URL	Date	SRC

URL	Date	SRC
https://github.com/jupyterhub/systemdspawner/commit/a4d08fd2ade1cfd0ef2c29dc221e649345f23580	2020-12-10

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Jupyterhub Search vendor "Jupyterhub"		Systemdspawner Search vendor "Jupyterhub" for product "Systemdspawner"				< 0.15 Search vendor "Jupyterhub" for product "Systemdspawner" and version " < 0.15"		-		Affected