PT-2018-13263 · Plainview · Plainview Activity Monitor

Lydéric Lefebvre · Publicado 2018-08-26 · Atualizado 2023-02-02 · CVE-2018-15877

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Plainview Activity Monitor plugin versions prior to 20180826

Description The issue allows for OS command injection via shell metacharacters in the ip parameter of a "wp-admin/admin.php?page=plainview activity monitor&tab=activity tools" request.

Recommendations For versions prior to 20180826, update the Plainview Activity Monitor plugin to version 20180826 or later to resolve the issue. As a temporary workaround, consider restricting access to the "wp-admin/admin.php?page=plainview activity monitor&tab=activity tools" endpoint to minimize the risk of exploitation. Avoid using the ip parameter in the affected request until the issue is resolved.

Exploit

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2018-15877

Produtos afetados

Plainview Activity Monitor

Referências · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wp_plainview_activity_monitor_rce.rb · Exploit
• 🔥 http://packetstormsecurity.com/files/163425/WordPress-Plainview-Activity-Monitor-20161228-Remote-Code-Execution.html · Exploit
• 🔥 https://exploit-db.com/exploits/45274 · Exploit
• 🔥 http://packetstormsecurity.com/files/155502/WordPress-Plainview-Activity-Monitor-20161228-Remote-Command-Execution.html · Exploit
• 🔥❌ https://github.com/aas-n/CVE/tree/master/CVE-2018-15877 · Exploit, Deleted
• 🔥 https://exploit-db.com/exploits/50110 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-15877 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-15877 · Aviso do Fabricante