CVE-2020-21514: High severity cogent datahub vulnerability
An issue was discovered in Fluent Fluentd v.1.8.0 and Fluent-ui v.1.2.2 allows attackers to gain escalated privileges and execute arbitrary code due to a default password.
Other sources
An issue was discovered in Fluent Fluentd v.1.8.0 and Fluent-ui v.1.2.2 that allows attackers to gain escilated privileges and execute arbitrary code due to use of a default password.
— GitHub
An issue was discovered in Fluent-ui v.1.2.2 allows attackers to gain escalated privileges and execute arbitrary code due to a default password.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-21514?
CVE-2020-21514 is classified as a high severity vulnerability due to its potential for privilege escalation and arbitrary code execution.
How do I fix CVE-2020-21514?
To fix CVE-2020-21514, upgrade Fluentd to version 1.8.1 or later and Fluent-ui to version 1.2.3 or later.
Who is affected by CVE-2020-21514?
CVE-2020-21514 affects users of Fluentd version 1.8.0 and Fluent-ui version 1.2.2.
What are the consequences of exploiting CVE-2020-21514?
Exploiting CVE-2020-21514 can allow attackers to gain escalated privileges and execute arbitrary code on the affected systems.
Is there a workaround for CVE-2020-21514 if I can't upgrade?
There is no official workaround for CVE-2020-21514, so upgrading to the patched versions is strongly recommended.