PT-2018-15327 · Photorange · Photorange Photo Vault

Benjamin K.M · Publicado 2018-12-23 · Atualizado 2020-08-24 · CVE-2018-20371

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PhotoRange Photo Vault version 1.2

Description The issue allows remote attackers to bypass intended GET restrictions via a brute-force approach. This is because the password is appended to the URI for authorization. For example, attackers can use "GET /login.html passwd1" and "GET /login.html passwd2" and so on to bypass restrictions.

Recommendations For PhotoRange Photo Vault version 1.2, consider modifying the authorization mechanism to prevent passwords from being appended to the URI, thereby preventing brute-force attacks. As a temporary workaround, restrict access to the login endpoint to minimize the risk of exploitation.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2018-20371

Produtos afetados

Photorange Photo Vault

Referências · 3

• 🔥 https://vulnerability-lab.com/get_content.php?id=2110 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-20371 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-20371 · Aviso do Fabricante