PT-2018-18618 · Unknown · Ldap Account Manager

Michal Kedzior · Publicado 2018-03-27 · Atualizado 2018-04-19 · CVE-2018-8763

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions LDAP Account Manager versions prior to 6.3

Description The issue allows for XSS via the dn parameter to the "templates/3rdParty/pla/htdocs/cmd.php" URI or the template parameter to the "templates/3rdParty/pla/htdocs/cmd.php?cmd=rename form" URI.

Recommendations For versions prior to 6.3, update to version 6.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the "cmd.php" endpoint and avoiding the use of the dn and template parameters in the affected URIs until the issue is resolved.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-8763

DLA-1342-1

DSA-4165-1

Produtos afetados

Ldap Account Manager

Referências · 21

• 🔥 http://packetstormsecurity.com/files/146858/LDAP-Account-Manager-6.2-Cross-Site-Scripting.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2018/Mar/45 · Exploit
• https://github.com/LDAPAccountManager/lam/commit/d4f0d6db966af4dd7d83c978125635f03895b81a · Nota
• https://github.com/LDAPAccountManager/lam/commit/16fc7f7e8603c5cb7c129cfbf97fc572b9b8740c · Nota
• https://github.com/LDAPAccountManager/lam/commit/f1d7aec5fc4aaf516e1d8a6f0eb3082050553302 · Nota
• https://security-tracker.debian.org/tracker/CVE-2018-8763 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/DSA-4165-1 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8763 · Nota de Segurança
• https://ubuntu.com/security/CVE-2018-8763 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2018-8763 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8764 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-8763 · Aviso do Fabricante
• https://debian.org/security/2018/dsa-4165 · Aviso do Fabricante
• https://ldap-account-manager.org/lamcms/node/354 · Nota
• https://osv.dev/vulnerability/DSA-4165-1 · Aviso do Fabricante