Vulnerabilities > CVE-2020-26118 - Deserialization of Untrusted Data vulnerability in Smartbear Collaborator

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

smartbear

CWE-502

NVD

Published: 2021-01-11

Updated: 2024-11-21

Summary

In SmartBear Collaborator Server through 13.3.13302, use of the Google Web Toolkit (GWT) API introduces a post-authentication Java deserialization vulnerability. The application's UpdateMemento class accepts a serialized Java object directly from the user without properly sanitizing it. A malicious object can be submitted to the server via an authenticated attacker to execute commands on the underlying system.

Vulnerable Configurations

Part	Description	Count
Application	Smartbear Smartbear Collaborator - Smartbear Collaborator 1.0.345 Smartbear Collaborator 1.0.346 Smartbear Collaborator 1.0.347 Smartbear Collaborator 1.0.349 Smartbear Collaborator 1.0.351 Smartbear Collaborator 1.0.352 Smartbear Collaborator 1.0.353 Smartbear Collaborator 1.0.354 Smartbear Collaborator 1.0.355 Smartbear Collaborator 1.0.356 Smartbear Collaborator 1.0.357 Smartbear Collaborator 1.0.358 Smartbear Collaborator 1.0.359 Smartbear Collaborator 1.0.360 Smartbear Collaborator 1.0.361 Smartbear Collaborator 1.0.400 Smartbear Collaborator 1.0.402 Smartbear Collaborator 1.0.406 Smartbear Collaborator 1.0.407 Smartbear Collaborator 1.0.408 Smartbear Collaborator 1.0.409 Smartbear Collaborator 1.0.410 Smartbear Collaborator 1.1.421 Smartbear Collaborator 1.1.422 Smartbear Collaborator 1.1.423 Smartbear Collaborator 1.1.424 Smartbear Collaborator 1.1.425 Smartbear Collaborator 1.1.426 Smartbear Collaborator 1.1.427 Smartbear Collaborator 1.1.428 Smartbear Collaborator 1.1.429 Smartbear Collaborator 1.1.433 Smartbear Collaborator 1.1.435 Smartbear Collaborator 1.1.436 Smartbear Collaborator 1.1.442 Smartbear Collaborator 1.2.500 Smartbear Collaborator 1.2.501 Smartbear Collaborator 1.2.502 Smartbear Collaborator 1.2.503 Smartbear Collaborator 1.2.504 Smartbear Collaborator 1.2.505 Smartbear Collaborator 1.2.506 Smartbear Collaborator 1.2.507 Smartbear Collaborator 1.2.508 Smartbear Collaborator 1.2.512 Smartbear Collaborator 1.2.515 Smartbear Collaborator 1.2.516 Smartbear Collaborator 2.0.601 Smartbear Collaborator 2.0.602 Smartbear Collaborator 2.0.606 Smartbear Collaborator 2.0.608 Smartbear Collaborator 2.0.609 Smartbear Collaborator 2.0.611 Smartbear Collaborator 2.0.612 Smartbear Collaborator 2.0.617 Smartbear Collaborator 2.0.618 Smartbear Collaborator 2.0.619 Smartbear Collaborator 2.0.620 Smartbear Collaborator 2.0.621 Smartbear Collaborator 2.1.700 Smartbear Collaborator 2.1.702 Smartbear Collaborator 2.1.703 Smartbear Collaborator 2.1.704 Smartbear Collaborator 2.1.705 Smartbear Collaborator 2.1.706 Smartbear Collaborator 2.1.707 Smartbear Collaborator 2.1.708 Smartbear Collaborator 2.1.709 Smartbear Collaborator 2.1.711 Smartbear Collaborator 2.1.712 Smartbear Collaborator 2.1.713 Smartbear Collaborator 2.1.714 Smartbear Collaborator 2.1.717 Smartbear Collaborator 2.1.719 Smartbear Collaborator 2.1.721 Smartbear Collaborator 2.1.723 Smartbear Collaborator 2.1.724 Smartbear Collaborator 2.1.725 Smartbear Collaborator 2.1.727 Smartbear Collaborator 2.1.729 Smartbear Collaborator 2.1.730 Smartbear Collaborator 2.1.731 Smartbear Collaborator 4.0.801 Smartbear Collaborator 4.0.802 Smartbear Collaborator 4.0.803 Smartbear Collaborator 4.0.804 Smartbear Collaborator 4.0.805 Smartbear Collaborator 4.0.806 Smartbear Collaborator 4.0.807 Smartbear Collaborator 4.0.808 Smartbear Collaborator 4.0.809 Smartbear Collaborator 4.0.810 Smartbear Collaborator 4.0.811 Smartbear Collaborator 4.0.812 Smartbear Collaborator 4.0.814 Smartbear Collaborator 4.0.817 Smartbear Collaborator 4.0.818 Smartbear Collaborator 4.0.819 Smartbear Collaborator 4.0.820 Smartbear Collaborator 4.0.821 Smartbear Collaborator 4.0.823 Smartbear Collaborator 4.0.824 Smartbear Collaborator 4.0.825 Smartbear Collaborator 4.0.828 Smartbear Collaborator 4.0.829 Smartbear Collaborator 4.0.831 Smartbear Collaborator 4.0.832 Smartbear Collaborator 4.0.833 Smartbear Collaborator 4.0.834 Smartbear Collaborator 4.0.835 Smartbear Collaborator 4.0.836 Smartbear Collaborator 4.0.837 Smartbear Collaborator 4.0.838 Smartbear Collaborator 4.0.839 Smartbear Collaborator 4.0.840 Smartbear Collaborator 4.0.841 Smartbear Collaborator 4.0.842 Smartbear Collaborator 4.0.843 Smartbear Collaborator 4.0.845 Smartbear Collaborator 4.0.846 Smartbear Collaborator 4.0.849 Smartbear Collaborator 4.0.850 Smartbear Collaborator 4.0.851 Smartbear Collaborator 4.0.852 Smartbear Collaborator 4.0.853 Smartbear Collaborator 4.0.854 Smartbear Collaborator 4.0.855 Smartbear Collaborator 4.0.856 Smartbear Collaborator 4.0.857 Smartbear Collaborator 4.0.858 Smartbear Collaborator 4.0.859 Smartbear Collaborator 4.0.860 Smartbear Collaborator 4.0.862 Smartbear Collaborator 4.0.863 Smartbear Collaborator 4.0.864 Smartbear Collaborator 5.0.5002 Smartbear Collaborator 5.0.5003 Smartbear Collaborator 5.0.5004 Smartbear Collaborator 5.0.5005 Smartbear Collaborator 5.0.5007 Smartbear Collaborator 5.0.5008 Smartbear Collaborator 5.0.5009 Smartbear Collaborator 5.0.5010 Smartbear Collaborator 5.0.5011 Smartbear Collaborator 5.0.5012 Smartbear Collaborator 5.0.5013 Smartbear Collaborator 5.0.5014 Smartbear Collaborator 5.0.5015 Smartbear Collaborator 5.0.5016 Smartbear Collaborator 5.0.5017 Smartbear Collaborator 5.0.5018 Smartbear Collaborator 5.0.5019 Smartbear Collaborator 5.0.5020 Smartbear Collaborator 5.0.5021 Smartbear Collaborator 5.0.5022 Smartbear Collaborator 5.0.5023 Smartbear Collaborator 5.0.5024 Smartbear Collaborator 5.0.5025 Smartbear Collaborator 5.0.5026 Smartbear Collaborator 5.0.5027 Smartbear Collaborator 5.0.5028 Smartbear Collaborator 5.0.5029 Smartbear Collaborator 5.0.5030 Smartbear Collaborator 5.0.5031 Smartbear Collaborator 5.0.5032 Smartbear Collaborator 5.0.5033 Smartbear Collaborator 5.0.5034 Smartbear Collaborator 5.0.5035 Smartbear Collaborator 5.0.5036 Smartbear Collaborator 5.0.5037 Smartbear Collaborator 5.0.5039 Smartbear Collaborator 5.0.5040 Smartbear Collaborator 5.0.5041 Smartbear Collaborator 6.0.6001 Smartbear Collaborator 6.0.6005 Smartbear Collaborator 6.0.6006 Smartbear Collaborator 6.0.6008 Smartbear Collaborator 6.0.6009 Smartbear Collaborator 6.0.6011 Smartbear Collaborator 6.0.6012 Smartbear Collaborator 6.0.6013 Smartbear Collaborator 6.0.6016 Smartbear Collaborator 6.0.6017 Smartbear Collaborator 6.0.6018 Smartbear Collaborator 6.1.6101 Smartbear Collaborator 6.1.6102 Smartbear Collaborator 6.1.6103 Smartbear Collaborator 6.1.6104 Smartbear Collaborator 6.5.6500 Smartbear Collaborator 6.5.6501 Smartbear Collaborator 6.5.6502 Smartbear Collaborator 6.5.6503 Smartbear Collaborator 6.5.6505 Smartbear Collaborator 6.5.6507 Smartbear Collaborator 6.5.6508 Smartbear Collaborator 6.5.6510 Smartbear Collaborator 7.0.7022 Smartbear Collaborator 7.0.7024 Smartbear Collaborator 7.0.7027 Smartbear Collaborator 7.1.7110 Smartbear Collaborator 7.1.7111 Smartbear Collaborator 7.2.7208 Smartbear Collaborator 7.2.7218 Smartbear Collaborator 7.2.7237 Smartbear Collaborator 7.3.7301 Smartbear Collaborator 7.3.7302 Smartbear Collaborator 7.3.7303 Smartbear Collaborator 7.3.7304 Smartbear Collaborator 8.0.8001 Smartbear Collaborator 8.0.8003 Smartbear Collaborator 8.1.8100 Smartbear Collaborator 8.2.8200 Smartbear Collaborator 8.2.8202 Smartbear Collaborator 8.3.8301 Smartbear Collaborator 8.4.8401 Smartbear Collaborator 8.4.8402 Smartbear Collaborator 8.4.8403 Smartbear Collaborator 8.4.8404 Smartbear Collaborator 8.4.8405 Smartbear Collaborator 8.4.8406 Smartbear Collaborator 8.5.8500 Smartbear Collaborator 8.5.8501 Smartbear Collaborator 8.5.8502 Smartbear Collaborator 9.0.9000 Smartbear Collaborator 9.0.9001 Smartbear Collaborator 9.1.9100 Smartbear Collaborator 9.1.9101 Smartbear Collaborator 9.2.9200 Smartbear Collaborator 9.3.9300 Smartbear Collaborator 9.4.9400 Smartbear Collaborator 9.4.9401 Smartbear Collaborator 9.5.9500 Smartbear Collaborator 9.5.9501 Smartbear Collaborator 9.5.9502 Smartbear Collaborator 10.0.10000 Smartbear Collaborator 10.0.10001 Smartbear Collaborator 10.1.10100 Smartbear Collaborator 10.1.10101 Smartbear Collaborator 10.2.10200 Smartbear Collaborator 11.0.11000 Smartbear Collaborator 11.1.11100 Smartbear Collaborator 11.1.11101 Smartbear Collaborator 11.1.11103 Smartbear Collaborator 11.2.11200 Smartbear Collaborator 11.2.11201 Smartbear Collaborator 11.3.11300 Smartbear Collaborator 11.3.11301 Smartbear Collaborator 11.3.11302 Smartbear Collaborator 11.4.11400 Smartbear Collaborator 11.4.11401 Smartbear Collaborator 11.4.11402 Smartbear Collaborator 11.4.11403 Smartbear Collaborator 11.4.11404 Smartbear Collaborator 11.4.11405 Smartbear Collaborator 11.5.11500 Smartbear Collaborator 11.5.11501 Smartbear Collaborator 11.5.11502 Smartbear Collaborator 11.5.11503 Smartbear Collaborator 11.5.11504 Smartbear Collaborator 11.5.11505 Smartbear Collaborator 11.5.11506 Smartbear Collaborator 11.5.11507 Smartbear Collaborator 11.5.11508 Smartbear Collaborator 11.5.11509 Smartbear Collaborator 11.5.11510 Smartbear Collaborator 11.5.11511 Smartbear Collaborator 12.0.12000 Smartbear Collaborator 12.1.12100 Smartbear Collaborator 12.1.12101 Smartbear Collaborator 12.2.12200 Smartbear Collaborator 12.2.12201 Smartbear Collaborator 12.2.12202 Smartbear Collaborator 12.2.12203 Smartbear Collaborator 12.2.12204 Smartbear Collaborator 12.2.12205 Smartbear Collaborator 12.2.12206 Smartbear Collaborator 12.2.12207 Smartbear Collaborator 12.3.12300 Smartbear Collaborator 12.3.12301 Smartbear Collaborator 12.3.12302 Smartbear Collaborator 12.3.12303 Smartbear Collaborator 12.3.12304 Smartbear Collaborator 12.3.12305 Smartbear Collaborator 12.3.12306 Smartbear Collaborator 12.4.12400 Smartbear Collaborator 12.4.12401 Smartbear Collaborator 12.4.12402 Smartbear Collaborator 12.4.12403 Smartbear Collaborator 12.5.12500 Smartbear Collaborator 12.5.12501 Smartbear Collaborator 12.5.12502 Smartbear Collaborator 12.5.12503 Smartbear Collaborator 12.5.12504 Smartbear Collaborator 13.0.13000 Smartbear Collaborator 13.0.13001 Smartbear Collaborator 13.0.13002 Smartbear Collaborator 13.1.13100 Smartbear Collaborator 13.2.13200 Smartbear Collaborator 13.3.13000 Smartbear Collaborator 13.3.13001 Smartbear Collaborator 13.3.13002 Smartbear Collaborator 13.3.13100 Smartbear Collaborator 13.3.13200 Smartbear Collaborator 13.3.13300 Smartbear Collaborator 13.3.13301 Smartbear Collaborator 13.3.13302	307

Common Weakness Enumeration (CWE)

CWE-502 - Deserialization of Untrusted Data

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References