PT-2017-16600 · Zoneminder+1 · Zoneminder+1
Knight-Of-Nico
·
Publicado
2017-02-06
·
Atualizado
2017-06-13
·
CVE-2017-5595
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
ZoneMinder versions 1.x through 1.30.0
Description
A file disclosure and inclusion issue exists due to unfiltered user-input being passed to the
readfile() function, allowing an authenticated attacker to read local system files, such as /etc/passwd, in the context of the web server user (www-data). The attack vector involves a .. (dot dot) in the path parameter within a zm/index.php?view=file&path= request.Recommendations
For ZoneMinder versions 1.x through 1.30.0, consider restricting access to the
file.php view until a patch is available. As a temporary workaround, avoid using the path parameter in the affected API endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Zoneminder