PT-2019-14333 · Unknown · Bloodhound

6661620A · Publicado 2019-08-27 · Atualizado 2019-08-30 · CVE-2019-15701

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BloodHound version 2.2.0

Description The issue allows remote attackers to execute arbitrary OS commands on the victim's machine when the search function's autocomplete feature is used in a specific scenario. This scenario involves the victim importing data from an Active Directory that contains a Group Policy Object (GPO) with JavaScript in its name.

Recommendations For BloodHound version 2.2.0, consider disabling the autocomplete feature in the search function as a temporary workaround until a patch is available. Restrict access to importing data from Active Directory to minimize the risk of exploitation. Avoid using the autocomplete feature when importing data that may contain malicious JavaScript code in GPO names.

Exploit

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2019-15701

Produtos afetados

Bloodhound

Referências · 3

• 🔥 https://github.com/BloodHoundAD/BloodHound/issues/267 · Exploit
• https://osv.dev/vulnerability/CVE-2019-15701 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-15701 · Nota de Segurança