PT-2019-12310 · Openkm · Openkm

Akkus + 1 · Publicado 2019-04-22 · Atualizado 2019-04-23 · CVE-2019-11445

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenKM versions 6.3.2 through 6.3.7

Description The issue allows an attacker to upload a malicious JSP file into the /okm:root directories and move that file to the home directory of the site. This is achieved by exploiting the Filesystem path control in the admin's Export field, specifically through the frontend/FileUpload and admin/repository export.jsp. As a result, attackers can gain remote code execution through the application server with root privileges.

Recommendations For OpenKM versions 6.3.2 through 6.3.7, consider restricting access to the frontend/FileUpload and admin/repository export.jsp endpoints to minimize the risk of exploitation. Additionally, restrict the ability to upload and move files within the /okm:root directories to prevent malicious file uploads. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2019-11445

Produtos afetados

Openkm

Referências · 5

• 🔥 https://exploit-db.com/exploits/46526 · Exploit
• 🔥 https://pentest.com.tr/exploits/OpenKM-DM-6-3-7-Remote-Command-Execution-Metasploit.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-11445 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11445 · Nota
• https://osv.dev/vulnerability/CVE-2019-11445 · Aviso do Fabricante