PT-2019-10164 · Raritan · Commandcenter Secure Gateway

Faruk Ünal + 1 · Publicado 2019-11-18 · Atualizado 2019-11-21 · CVE-2018-20687

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Raritan CommandCenter Secure Gateway versions prior to 8.0.0

Description: The issue allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks. This is achieved by sending a crafted DTD in an XML request, exploiting an XML external entity (XXE) vulnerability in the CommandCenterWebServices.

Recommendations: For versions prior to 8.0.0, update to version 8.0.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the CommandCenterWebServices to minimize the risk of exploitation.

Correção

XXE

Enumeração de Fraquezas

CWE-611

Identificadores relacionados

CVE-2018-20687

Produtos afetados

Commandcenter Secure Gateway

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-20687 · Nota de Segurança
• http://seclists.org/fulldisclosure/2019/Nov/11 · Nota
• https://osv.dev/vulnerability/CVE-2018-20687 · Aviso do Fabricante
• http://packetstormsecurity.com/files/155359/Raritan-CommandCenter-Secure-Gateway-XML-Injection.html · Nota