PT-2019-11672 · Ahsay · Ahsay Cloud Backup Suite

Publicado 2019-07-26 · Atualizado 2019-07-31 · CVE-2019-10267

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Ahsay Cloud Backup Suite version 8.1.0.50

Description An issue was discovered that allows for insecure file upload and code execution. It is possible to upload a file into any directory of the server, including inserting a JSP shell into the web server's directory and executing it, leading to full access to the system as the configured user.

Recommendations For Ahsay Cloud Backup Suite version 8.1.0.50, consider restricting file upload capabilities to prevent malicious file uploads until a patch is available. As a temporary workaround, restrict access to sensitive directories on the server to minimize the risk of exploitation.

Exploit

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2019-10267

Produtos afetados

Ahsay Cloud Backup Suite

Referências · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/ahsay_backup_fileupload.rb · Exploit
• 🔥 https://wbsec.nl/ahsay · Exploit
• 🔥 http://packetstormsecurity.com/files/153770/Ahsay-Backup-7.x-8.x-File-Upload-Remote-Code-Execution.html · Exploit
• 🔥 http://packetstormsecurity.com/files/153771/Ahsay-Backup-7.x-8.x-File-Upload-Remote-Code-Execution.html · Exploit
• 🔥 https://exploit-db.com/exploits/47180 · Exploit
• 🔥 https://exploit-db.com/exploits/47179 · Exploit
• https://osv.dev/vulnerability/CVE-2019-10267 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-10267 · Nota de Segurança