PT-2018-9762 · Honeynet · Glastopf

Loveraven42 · Publicado 2018-04-19 · Atualizado 2024-08-05 · CVE-2018-10220

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Glastopf version 3.1.3-dev

Description: The issue concerns a Server-Side Request Forgery (SSRF) in Glastopf, demonstrated through the abc.php a parameter. It is noted that the vendor considers this behavior intentional, as Glastopf is a web application honeypot. The product includes modules for emulation, such as Remote File Inclusion, which is supported by the rfi.py file in the modules/handlers/emulators directory.

Recommendations: For Glastopf version 3.1.3-dev, consider restricting access to the abc.php endpoint to minimize the risk of exploitation, as the SSRF behavior is considered part of the honeypot's intentional functionality.

Exploit

Correção

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2018-10220

Produtos afetados

Glastopf

Referências · 3

• 🔥 https://github.com/mushorg/glastopf/issues/286 · Exploit
• https://osv.dev/vulnerability/CVE-2018-10220 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-10220 · Nota de Segurança