PT-2018-14381 · Icinga+1 · Icinga Web 2+1
Publicado
2018-12-17
·
Atualizado
2020-01-16
·
CVE-2018-18249
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Icinga Web 2 versions prior to 2.6.2
Description
The issue allows for the injection of PHP ini-file directives through environment variables. This can be achieved by sending specific information to the attacker, such as using a
name parameter with a value like ${PATH} ${APACHE RUN DIR} ${APACHE RUN USER} in API endpoints like "/icingaweb2/navigation/add" or "/icingaweb2/dashboard/new-dashlet".Recommendations
For versions prior to 2.6.2, update to version 2.6.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the
/icingaweb2/navigation/add and /icingaweb2/dashboard/new-dashlet API endpoints to minimize the risk of exploitation. Avoid using the name parameter with untrusted input in these endpoints until the issue is resolved.Exploit
Correção
Code Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Icinga Web 2
Suse