PT-2017-17335 · Solarwinds · Solarwinds Ftp Voyager

Hyp3Rlinx + 1 · Publicado 2017-03-20 · Atualizado 2017-03-23 · CVE-2017-6803

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SolarWinds FTP Voyager version 16.2.0

Description The issue affects the web interface in the Scheduler of SolarWinds FTP Voyager, allowing remote attackers to hijack user authentication for specific requests. This can lead to actions such as changing the admin password, terminating the scheduler, or possibly executing arbitrary commands. The attack is facilitated through crafted requests, for example, to the "Admin/XML/Result.xml" endpoint.

Recommendations For SolarWinds FTP Voyager version 16.2.0, as a temporary workaround, consider restricting access to the Scheduler's web interface and avoid using the Admin/XML/Result.xml endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2017-6803

Produtos afetados

Solarwinds Ftp Voyager

Referências · 6

• 🔥 http://packetstormsecurity.com/files/141567/FTP-Voyager-Scheduler-16.2.0-CSRF-Denial-Of-Service.html · Exploit
• 🔥 http://hyp3rlinx.altervista.org/advisories/FTP-VOYAGER-SCHEDULER-CSRF-REMOTE-CMD-EXECUTION.txt · Exploit
• 🔥 https://exploit-db.com/exploits/41574 · Exploit
• http://securityfocus.com/bid/96814 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-6803 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-6803 · Aviso do Fabricante