PT-2018-18641 · Automated Logic · Webctrl

Darrell Damstedt + 1 · Publicado 2018-06-14 · Atualizado 2021-07-27 · CVE-2018-8819

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Automated Logic Corporation WebCTRL versions 6.0 through 6.5

Description A security issue was found that allows an unauthenticated attacker to disclose full file contents from the underlying web server OS. This is possible due to a weakly configured XML parser that processes malicious input via the "X-Wap-Profile" HTTP header.

Recommendations For versions 6.0 through 6.5, update the XML parser configuration to prevent the disclosure of file contents. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XXE

Enumeração de Fraquezas

CWE-611

Identificadores relacionados

CVE-2018-8819

Produtos afetados

Webctrl

Referências · 6

• 🔥 https://coalfire.com/The-Coalfire-Blog/June-2018/How-I-Found-CVE-2018-8819-Out-of-Band-(OOB · Exploit
• 🔥 https://hateshape.github.io/general/2018/06/07/CVE-2018-8819.html · Exploit
• http://packetstormsecurity.com/files/148126/WebCTRL-Out-Of-Band-XML-Injection.html · Nota
• http://seclists.org/fulldisclosure/2018/Jun/21 · Nota
• https://osv.dev/vulnerability/CVE-2018-8819 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-8819 · Nota de Segurança