PT-2017-14019 · 3Cx · 3Cx Phone System

Jens Regel · Publicado 2017-10-18 · Atualizado 2017-11-13 · CVE-2017-15359

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions 3CX Phone System version 15.5.3554.1

Description The issue allows for a directory traversal attack, which can be exploited by an authenticated attacker to access sensitive information. This can aid in subsequent attacks. The vulnerable API endpoints are "/api/RecordingList/DownloadRecord?file=" and "/api/SupportInfo?file=", where the file parameter is used to traverse directories.

Recommendations For 3CX Phone System version 15.5.3554.1, consider restricting access to the "/api/RecordingList/DownloadRecord?file=" and "/api/SupportInfo?file=" API endpoints to minimize the risk of exploitation. As a temporary workaround, restrict the use of the file parameter in these endpoints until a patch is available.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2017-15359

Produtos afetados

3Cx Phone System

Referências · 4

• 🔥 https://exploit-db.com/exploits/42991 · Exploit
• http://seclists.org/fulldisclosure/2017/Oct/37 · Nota
• https://osv.dev/vulnerability/CVE-2017-15359 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-15359 · Nota de Segurança