PT-2019-12774 · Ampache+1 · Ampache+1

Pablo Martinez + 1 · Publicado 2019-08-22 · Atualizado 2021-01-14 · CVE-2019-12385

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ampache versions through 3.9.1

Description An issue in the search engine allows for SQL Injection, enabling any user, including guest users, to extract data from the database, such as sessions and hashed passwords. This could lead to the compromise of admin accounts, especially when combined with the weak password generator algorithm in the lostpassword functionality.

Recommendations For Ampache versions through 3.9.1, consider restricting access to the search functionality, specifically the lib/class/search.class.php file, until a fix is available. As a temporary workaround, limit the use of the lostpassword functionality to prevent exploitation of the weak password generator algorithm.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2019-12385

DLA-1988-1

USN-4693-1

Produtos afetados

Ampache

Ubuntu

Referências · 11

• 🔥 https://tarlogic.com/en/blog/vulnerabilities-in-ampache · Exploit
• https://cve.org/CVERecord?id=CVE-2019-12385 · Nota de Segurança
• https://osv.dev/vulnerability/DLA-1988-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-12386 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-4693-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-12385 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-12385 · Aviso do Fabricante
• https://lists.debian.org/debian-lts-announce/2019/11/msg00008.html · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-12385 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-12385 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-4693-1 · Aviso do Fabricante