SB2020090421 - Privilege escalation in Bundler
Published: September 4, 2020 Updated: January 8, 2021
Security Bulletin ID
SB2020090421
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Files or Directories Accessible to External Parties (CVE-ID: CVE-2019-3881)
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to Bundler uses a predictable path in /tmp/, created with insecure permissions as a storage location for gems, if locations under the user's home directory are not available. If Bundler is used in a scenario where the user does not have a writable home directory, an attacker could place malicious code in this directory that would be later loaded and executed.
Remediation
Install update from vendor's website.