PT-2019-13091 · Artica+1 · Artica Pandora Fms+1

Hashim Jawad · Publicado 2019-06-29 · Atualizado 2020-08-24 · CVE-2019-13035

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Artica Pandora FMS versions 7.0 NG before 735

Description The issue is related to improper permissions on the C:PandoraFMS directory and its sub-folders, allowing standard users to create new files. When the Apache service httpd.exe receives web requests to the portal, it attempts to execute cmd.exe from the C:PandoraFMS directory as NT AUTHORITYSYSTEM. This allows non-privileged users to escalate privileges to NT AUTHORITYSYSTEM.

Recommendations For Artica Pandora FMS version 7.0 NG before 735, update to version 735 or later to resolve the issue. As a temporary workaround, consider restricting write access to the C:PandoraFMS directory and its sub-folders to prevent standard users from creating new files. Additionally, restrict the execution of cmd.exe by the Apache service httpd.exe to minimize the risk of privilege escalation.

Correção

Identificadores relacionados

CVE-2019-13035

Produtos afetados

Apache Http Server

Artica Pandora Fms

Referências · 4

• https://github.com/active-labs/Advisories/blob/master/2019/ACTIVE-2019-008.md · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-13035 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-13035 · Aviso do Fabricante
• https://t.me/malwr/1498 · Publicação no Telegram