CVE-2020-36911
CriticalSummary
Covenant versions 0.1.3 - 0.5 contain a remote code execution vulnerability that allows attackers to craft malicious JWT tokens with administrative privileges. Attackers can generate forged tokens with admin roles and upload custom DLL payloads to execute arbitrary commands on the target system.
Risk Assessment
The vulnerability allows an attacker to fully compromise the target system, potentially leading to data theft, malware installation, or disruption of services.
Recommendation
Update Covenant to a patched version. Additionally, monitor logs for unusual JWT tokens and restrict access to the system.
Original NVD description (English source)
Covenant 0.1.3 - 0.5 contains a remote code execution vulnerability that allows attackers to craft malicious JWT tokens with administrative privileges. Attackers can generate forged tokens with admin roles and upload custom DLL payloads to execute arbitrary commands on the target system.