PT-2018-18249 · Antsle · Antsle Antman

Joshua Bowser · Publicado 2018-03-06 · Atualizado 2019-10-03 · CVE-2018-7739

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: antsle antman versions prior to 0.9.1a

Description: The issue allows remote attackers to bypass authentication by providing invalid characters in the username and password parameters. This can be achieved by sending a string, such as username=>&password=%0a, to the "/login" API endpoint. As a result, an attacker can obtain root permissions within the web management console. The root cause of this issue is the insufficient input validation in the antsle-auth bash script, which is used by the login process through Java's ProcessBuilder class.

Recommendations: For versions prior to 0.9.1a, update to version 0.9.1a or later to resolve the issue. As a temporary workaround, consider restricting access to the "/login" API endpoint to minimize the risk of exploitation. Additionally, avoid using special characters in the username and password parameters until the issue is resolved.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2018-7739

Produtos afetados

Antsle Antman

Referências · 5

• 🔥 https://exploit-db.com/exploits/44262 · Exploit
• 🔥 https://exploit-db.com/exploits/44220 · Exploit
• 🔥 http://blog.codecatoctin.com/2018/02/antman-authentication-bypass.html · Exploit
• https://osv.dev/vulnerability/CVE-2018-7739 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-7739 · Nota de Segurança