PT-2014-4595 · Vtiger · Vtiger

Publicado 2014-11-16 · Atualizado 2017-11-20 · CVE-2014-2268

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions vTiger versions 6.0 before Security Patch 2

Description The issue is related to improper access restriction in the views/Index.php file within the Install module. This allows remote attackers to re-install the application by setting the X-Requested-With HTTP header in a request. Attackers can execute arbitrary PHP code via the db name parameter.

Recommendations For versions 6.0 before Security Patch 2, apply Security Patch 2 to resolve the issue. As a temporary workaround, consider restricting access to the views/Index.php file in the Install module to minimize the risk of exploitation. Avoid using the db name parameter in affected requests until the issue is resolved.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-2268

Produtos afetados

Vtiger

Referências · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/vtiger_install_rce.rb · Exploit
• 🔥 https://exploit-db.com/exploits/32794 · Exploit
• 🔥 http://exploit-db.com/exploits/32794 · Exploit
• 🔥 https://navixia.com/blog/entry/navixia-find-critical-vulnerabilities-in-vtiger-crm-cve-2014-2268-cve-2014-2269.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-2268 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2268 · Nota
• http://securityfocus.com/bid/66757 · Nota
• http://vtiger-crm.2324883.n4.nabble.com/Vtigercrm-developers-IMP-forgot-password-and-re-installation-security-fix-tt9786.html · Aviso do Fabricante