385 lines
18 KiB
JSON
385 lines
18 KiB
JSON
{
|
||
"dataType": "CVE_RECORD",
|
||
"dataVersion": "5.2",
|
||
"cveMetadata": {
|
||
"cveId": "CVE-2026-1496",
|
||
"assignerOrgId": "8cad7728-009c-4a3d-a95e-ca62e6ff8a0b",
|
||
"state": "PUBLISHED",
|
||
"assignerShortName": "BlackDuck",
|
||
"dateReserved": "2026-01-27T15:53:39.147Z",
|
||
"datePublished": "2026-03-27T14:14:01.871Z",
|
||
"dateUpdated": "2026-03-27T14:36:04.188Z"
|
||
},
|
||
"containers": {
|
||
"cna": {
|
||
"providerMetadata": {
|
||
"orgId": "8cad7728-009c-4a3d-a95e-ca62e6ff8a0b",
|
||
"shortName": "BlackDuck",
|
||
"dateUpdated": "2026-03-27T14:14:01.871Z"
|
||
},
|
||
"title": "Coverity CLI Authentication Bypass",
|
||
"datePublic": "2026-03-27T13:00:00.000Z",
|
||
"problemTypes": [
|
||
{
|
||
"descriptions": [
|
||
{
|
||
"lang": "en",
|
||
"cweId": "CWE-639",
|
||
"description": "CWE-639 Authorization bypass through User-Controlled key",
|
||
"type": "CWE"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"impacts": [
|
||
{
|
||
"capecId": "CAPEC-384",
|
||
"descriptions": [
|
||
{
|
||
"lang": "en",
|
||
"value": "CAPEC-384 Application API Message Manipulation via Man-in-the-Middle"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"affected": [
|
||
{
|
||
"vendor": "Black Duck",
|
||
"product": "Coverity",
|
||
"versions": [
|
||
{
|
||
"status": "affected",
|
||
"version": "2024.3.0",
|
||
"lessThan": "2025.12.0",
|
||
"versionType": "custom"
|
||
},
|
||
{
|
||
"status": "unaffected",
|
||
"version": "2024.3.0A"
|
||
},
|
||
{
|
||
"status": "unaffected",
|
||
"version": "2024.3.1A"
|
||
},
|
||
{
|
||
"status": "unaffected",
|
||
"version": "2024.3.2A"
|
||
},
|
||
{
|
||
"status": "unaffected",
|
||
"version": "2024.6.0A"
|
||
},
|
||
{
|
||
"status": "unaffected",
|
||
"version": "2024.6.1A"
|
||
},
|
||
{
|
||
"status": "unaffected",
|
||
"version": "2024.9.0A"
|
||
},
|
||
{
|
||
"status": "unaffected",
|
||
"version": "2024.9.1A"
|
||
},
|
||
{
|
||
"status": "unaffected",
|
||
"version": "2024.12.0A"
|
||
},
|
||
{
|
||
"status": "unaffected",
|
||
"version": "2024.12.1A"
|
||
},
|
||
{
|
||
"status": "unaffected",
|
||
"version": "2024.12.2"
|
||
},
|
||
{
|
||
"status": "unaffected",
|
||
"version": "2025.3.0A"
|
||
},
|
||
{
|
||
"status": "unaffected",
|
||
"version": "2025.3.1A"
|
||
},
|
||
{
|
||
"status": "unaffected",
|
||
"version": "2025.3.2"
|
||
},
|
||
{
|
||
"status": "unaffected",
|
||
"version": "2025.6.0A"
|
||
},
|
||
{
|
||
"status": "unaffected",
|
||
"version": "2025.6.2A"
|
||
},
|
||
{
|
||
"status": "unaffected",
|
||
"version": "2025.6.4"
|
||
},
|
||
{
|
||
"status": "unaffected",
|
||
"version": "2025.9.0A"
|
||
},
|
||
{
|
||
"status": "unaffected",
|
||
"version": "2025.9.2A"
|
||
},
|
||
{
|
||
"status": "unaffected",
|
||
"version": "2025.9.3"
|
||
},
|
||
{
|
||
"status": "unaffected",
|
||
"version": "2025.12.0A"
|
||
},
|
||
{
|
||
"status": "unaffected",
|
||
"version": "2025.12.1"
|
||
}
|
||
],
|
||
"defaultStatus": "unaffected"
|
||
}
|
||
],
|
||
"cpeApplicability": [
|
||
{
|
||
"operator": "OR",
|
||
"nodes": [
|
||
{
|
||
"operator": "OR",
|
||
"negate": false,
|
||
"cpeMatch": [
|
||
{
|
||
"vulnerable": true,
|
||
"criteria": "cpe:2.3:a:black_duck:coverity:*:*:*:*:*:*:*:*",
|
||
"versionStartIncluding": "2024.3.0",
|
||
"versionEndExcluding": "2025.12.0"
|
||
},
|
||
{
|
||
"vulnerable": false,
|
||
"criteria": "cpe:2.3:a:black_duck:coverity:2024.3.0a:*:*:*:*:*:*:*"
|
||
},
|
||
{
|
||
"vulnerable": false,
|
||
"criteria": "cpe:2.3:a:black_duck:coverity:2024.3.1a:*:*:*:*:*:*:*"
|
||
},
|
||
{
|
||
"vulnerable": false,
|
||
"criteria": "cpe:2.3:a:black_duck:coverity:2024.3.2a:*:*:*:*:*:*:*"
|
||
},
|
||
{
|
||
"vulnerable": false,
|
||
"criteria": "cpe:2.3:a:black_duck:coverity:2024.6.0a:*:*:*:*:*:*:*"
|
||
},
|
||
{
|
||
"vulnerable": false,
|
||
"criteria": "cpe:2.3:a:black_duck:coverity:2024.6.1a:*:*:*:*:*:*:*"
|
||
},
|
||
{
|
||
"vulnerable": false,
|
||
"criteria": "cpe:2.3:a:black_duck:coverity:2024.9.0a:*:*:*:*:*:*:*"
|
||
},
|
||
{
|
||
"vulnerable": false,
|
||
"criteria": "cpe:2.3:a:black_duck:coverity:2024.9.1a:*:*:*:*:*:*:*"
|
||
},
|
||
{
|
||
"vulnerable": false,
|
||
"criteria": "cpe:2.3:a:black_duck:coverity:2024.12.0a:*:*:*:*:*:*:*"
|
||
},
|
||
{
|
||
"vulnerable": false,
|
||
"criteria": "cpe:2.3:a:black_duck:coverity:2024.12.1a:*:*:*:*:*:*:*"
|
||
},
|
||
{
|
||
"vulnerable": false,
|
||
"criteria": "cpe:2.3:a:black_duck:coverity:2024.12.2:*:*:*:*:*:*:*"
|
||
},
|
||
{
|
||
"vulnerable": false,
|
||
"criteria": "cpe:2.3:a:black_duck:coverity:2025.3.0a:*:*:*:*:*:*:*"
|
||
},
|
||
{
|
||
"vulnerable": false,
|
||
"criteria": "cpe:2.3:a:black_duck:coverity:2025.3.1a:*:*:*:*:*:*:*"
|
||
},
|
||
{
|
||
"vulnerable": false,
|
||
"criteria": "cpe:2.3:a:black_duck:coverity:2025.3.2:*:*:*:*:*:*:*"
|
||
},
|
||
{
|
||
"vulnerable": false,
|
||
"criteria": "cpe:2.3:a:black_duck:coverity:2025.6.0a:*:*:*:*:*:*:*"
|
||
},
|
||
{
|
||
"vulnerable": false,
|
||
"criteria": "cpe:2.3:a:black_duck:coverity:2025.6.2a:*:*:*:*:*:*:*"
|
||
},
|
||
{
|
||
"vulnerable": false,
|
||
"criteria": "cpe:2.3:a:black_duck:coverity:2025.6.4:*:*:*:*:*:*:*"
|
||
},
|
||
{
|
||
"vulnerable": false,
|
||
"criteria": "cpe:2.3:a:black_duck:coverity:2025.9.0a:*:*:*:*:*:*:*"
|
||
},
|
||
{
|
||
"vulnerable": false,
|
||
"criteria": "cpe:2.3:a:black_duck:coverity:2025.9.2a:*:*:*:*:*:*:*"
|
||
},
|
||
{
|
||
"vulnerable": false,
|
||
"criteria": "cpe:2.3:a:black_duck:coverity:2025.9.3:*:*:*:*:*:*:*"
|
||
},
|
||
{
|
||
"vulnerable": false,
|
||
"criteria": "cpe:2.3:a:black_duck:coverity:2025.12.0a:*:*:*:*:*:*:*"
|
||
},
|
||
{
|
||
"vulnerable": false,
|
||
"criteria": "cpe:2.3:a:black_duck:coverity:2025.12.1:*:*:*:*:*:*:*"
|
||
}
|
||
]
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"descriptions": [
|
||
{
|
||
"lang": "en",
|
||
"value": "Vulnerable versions of Coverity Connect lack an error handler in the authentication logic for command line tooling that makes it vulnerable to an authentication bypass. A malicious actor with access to the /token API endpoint that either knows or guesses a valid username, can use this in a specially crafted HTTP request to bypass authentication. Successful exploitation allows the malicious actor to assume all roles and privileges granted to the valid user’s Coverity Connect account.",
|
||
"supportingMedia": [
|
||
{
|
||
"type": "text/html",
|
||
"base64": false,
|
||
"value": "<p>Vulnerable versions of Coverity Connect lack an error handler in the authentication logic for command line tooling that makes it vulnerable to an authentication bypass. <span>A malicious actor with access to the</span><span> </span><code>/token</code><span> </span><span>API endpoint that either knows or guesses a valid username, can use this in a specially crafted HTTP request to bypass authentication. </span><span>Successful exploitation allows the malicious actor to assume all roles and privileges granted to the valid user’s Coverity Connect account. </span></p>"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"references": [
|
||
{
|
||
"url": "https://community.blackduck.com/s/article/Black-Duck-Security-Advisory-CVE-2026-1496",
|
||
"tags": [
|
||
"vendor-advisory"
|
||
]
|
||
},
|
||
{
|
||
"url": "https://community.blackduck.com/s/article/Instructions-on-how-to-block-token-endpoint-for-Coverity-Connect",
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"mitigation"
|
||
]
|
||
},
|
||
{
|
||
"url": "https://community.blackduck.com/s/article/WAF-IDS-IPS-Mitigation-Guidance",
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"mitigation"
|
||
]
|
||
},
|
||
{
|
||
"url": "https://github.com/blackduck-inc/Coverity-Usage-Log-Analyzer",
|
||
"tags": [
|
||
"related"
|
||
]
|
||
}
|
||
],
|
||
"metrics": [
|
||
{
|
||
"format": "CVSS",
|
||
"scenarios": [
|
||
{
|
||
"lang": "en",
|
||
"value": "GENERAL"
|
||
}
|
||
],
|
||
"cvssV4_0": {
|
||
"attackVector": "NETWORK",
|
||
"attackComplexity": "LOW",
|
||
"attackRequirements": "NONE",
|
||
"privilegesRequired": "NONE",
|
||
"userInteraction": "NONE",
|
||
"vulnConfidentialityImpact": "HIGH",
|
||
"subConfidentialityImpact": "NONE",
|
||
"vulnIntegrityImpact": "HIGH",
|
||
"subIntegrityImpact": "NONE",
|
||
"vulnAvailabilityImpact": "NONE",
|
||
"subAvailabilityImpact": "NONE",
|
||
"exploitMaturity": "NOT_DEFINED",
|
||
"Safety": "NOT_DEFINED",
|
||
"Automatable": "NOT_DEFINED",
|
||
"Recovery": "NOT_DEFINED",
|
||
"valueDensity": "NOT_DEFINED",
|
||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||
"providerUrgency": "NOT_DEFINED",
|
||
"version": "4.0",
|
||
"baseSeverity": "CRITICAL",
|
||
"baseScore": 9.3,
|
||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"
|
||
}
|
||
}
|
||
],
|
||
"solutions": [
|
||
{
|
||
"lang": "en",
|
||
"value": "Customers\nare recommended to upgrade to one of the following Coverity patched versions at their earliest availability or deploy documented mitigations.\n\n\n\nPatched versions:\n\n\n\n\n * 2025.12.1\n\n * 2025.12.0A\n * 2025.9.2A\n * 2025.9.0A\n * 2025.6.2A\n * 2025.6.0A\n * 2025.3.1A\n * 2025.3.0A\n * 2024.12.1A\n * 2024.12.0A\n * 2024.9.1A\n * 2024.9.0A\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nFull Installers:\n\n\n\n\n\n * 2025.12.1\n * 2025.9.3\n * 2025.6.4\n * 2025.3.2\n * 2024.12.2",
|
||
"supportingMedia": [
|
||
{
|
||
"type": "text/html",
|
||
"base64": false,
|
||
"value": "<p>Customers\nare recommended to upgrade to one of the following Coverity patched versions at their earliest availability or deploy documented mitigations.</p>\n\n<p>Patched versions:</p>\n\n<ul>\n <li>2025.12.1</li>\n<li>2025.12.0A</li><li>2025.9.2A</li><li>2025.9.0A</li><li>2025.6.2A</li><li>2025.6.0A</li><li>2025.3.1A</li><li>2025.3.0A</li><li>2024.12.1A</li><li>2024.12.0A</li><li>2024.9.1A</li><li><span>2024.9.0A</span></li></ul>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n<p>Full Installers:</p>\n\n<p></p><ul><li>2025.12.1</li><li>2025.9.3</li><li>2025.6.4</li><li>2025.3.2</li><li>2024.12.2</li></ul><p></p>"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"credits": [
|
||
{
|
||
"lang": "en",
|
||
"value": "Huong Kieu from Cenobe",
|
||
"type": "finder"
|
||
}
|
||
],
|
||
"source": {
|
||
"discovery": "UNKNOWN"
|
||
},
|
||
"x_generator": {
|
||
"engine": "Vulnogram 1.0.1"
|
||
}
|
||
},
|
||
"adp": [
|
||
{
|
||
"metrics": [
|
||
{
|
||
"other": {
|
||
"type": "ssvc",
|
||
"content": {
|
||
"timestamp": "2026-03-27T14:35:08.919139Z",
|
||
"id": "CVE-2026-1496",
|
||
"options": [
|
||
{
|
||
"Exploitation": "none"
|
||
},
|
||
{
|
||
"Automatable": "yes"
|
||
},
|
||
{
|
||
"Technical Impact": "total"
|
||
}
|
||
],
|
||
"role": "CISA Coordinator",
|
||
"version": "2.0.3"
|
||
}
|
||
}
|
||
}
|
||
],
|
||
"title": "CISA ADP Vulnrichment",
|
||
"providerMetadata": {
|
||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||
"shortName": "CISA-ADP",
|
||
"dateUpdated": "2026-03-27T14:36:04.188Z"
|
||
}
|
||
}
|
||
]
|
||
}
|
||
} |