{
  "schema_version": "1.4.0",
  "id": "GHSA-qh64-cxhv-8756",
  "modified": "2022-05-24T17:37:15Z",
  "published": "2022-05-24T17:37:15Z",
  "aliases": [
    "CVE-2020-28169"
  ],
  "details": "The td-agent-builder plugin before 2020-12-18 for Fluentd allows attackers to gain privileges because the bin directory is writable by a user account, but a file in bin is executed as NT AUTHORITY\\SYSTEM.",
  "severity": [
    {
      "type": "CVSS_V3",
      "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
    }
  ],
  "affected": [],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-28169"
    },
    {
      "type": "WEB",
      "url": "https://github.com/fluent/fluentd/issues/3201"
    },
    {
      "type": "WEB",
      "url": "https://github.com/fluent-plugins-nursery/td-agent-builder/pull/247/commits/6f9cb6393392d62caa99907c0ebbcbab6b94a3f1"
    },
    {
      "type": "WEB",
      "url": "https://github.com/kenhys/td-agent-builder/commit/eec6e2dedf12f2e0c01c2bbe7b8c15b639b3b938"
    },
    {
      "type": "WEB",
      "url": "https://docs.fluentd.org/installation/install-by-msi"
    },
    {
      "type": "WEB",
      "url": "https://td-agent-package-browser.herokuapp.com/4/windows"
    },
    {
      "type": "WEB",
      "url": "https://www.debian.org/security/2021/dsa-4949"
    },
    {
      "type": "WEB",
      "url": "https://www.fluentd.org"
    },
    {
      "type": "WEB",
      "url": "http://packetstormsecurity.com/files/160791/Fluentd-TD-agent-4.0.1-Insecure-Folder-Permission.html"
    }
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-732"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2020-12-24T15:15:00Z"
  }
}