PT-2017-2906 · Atlassian · Sourcetree

Publicado 2017-03-02 · Atualizado 2017-05-17 · CVE-2017-8768

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Atlassian SourceTree versions 2.5c and prior

Description The issue exists due to a lack of neutralization of special elements used in operating system commands. Exploitation may allow a remote attacker to execute arbitrary commands by manipulating the URL, specifically using the sourcetree://cloneRepo/ext:: or sourcetree://checkoutRef/ext:: URL substrings followed by the command.

Recommendations For Atlassian SourceTree versions 2.5c and prior, consider disabling the handling of the sourcetree:// scheme until a patch is available. Restrict access to the cloneRepo and checkoutRef functions to minimize the risk of exploitation. Avoid using the sourcetree://cloneRepo/ext:: and sourcetree://checkoutRef/ext:: URL substrings in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

BDU:2017-02230

CVE-2017-8768

Produtos afetados

Sourcetree

Referências · 7

• https://bdu.fstec.ru/vul/2017-02230 · Nota de Segurança
• https://youtube.com/watch?v=SQ1_Ht-0Bdo · Nota
• https://osv.dev/vulnerability/CVE-2017-8768 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2017/05/03/5 · Nota
• http://securityfocus.com/bid/98329 · Nota
• http://seclists.org/fulldisclosure/2017/May/10 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-8768 · Nota de Segurança