PT-2018-11519 · Benoit Chesneau+2 · Unicorn+3

Publicado 2018-02-06 · Atualizado 2018-03-13 · CVE-2018-1299

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache Allura versions prior to 1.8.0

Description The issue allows unauthenticated attackers to retrieve arbitrary files through the Allura web application. The success of the attack may depend on the web server used with Allura, with some configurations such as Nginx, Apache/mod wsgi, or paster potentially preventing the attack, while others like gunicorn do not prevent it.

Recommendations For Apache Allura versions prior to 1.8.0, update to version 1.8.0 or later to resolve the issue. As a temporary workaround, consider using a web server configuration that prevents the attack, such as Nginx, Apache/mod wsgi, or paster, until the update can be applied.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2018-1299

Produtos afetados

Apache

Apache Allura

Nginx

Unicorn

Referências · 4

• https://osv.dev/vulnerability/CVE-2018-1299 · Aviso do Fabricante
• https://lists.apache.org/thread.html/b52069073cf3cb0f84c9e1e2b34d411fc163af39e4f3e50712ac8a4d%40%3Cdev.allura.apache.org%3E · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-1299 · Nota de Segurança
• https://allura.apache.org/posts/2018-allura-1.8.0.html · Aviso do Fabricante