PT-2019-18519 · Artica · Artica Proxy

Code16 · Publicado 2019-02-01 · Atualizado 2020-08-24 · CVE-2019-7300

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Artica Proxy version 3.06.200056

Description The issue allows remote attackers to execute arbitrary commands as root. This is achieved by reading the ldap admin and ldap password fields from the ressources/settings.inc file, using these credentials at the "logon.php" endpoint, and then entering the commands in the "admin.index.php" command-line field.

Recommendations For Artica Proxy version 3.06.200056, consider restricting access to the "logon.php" and "admin.index.php" endpoints to minimize the risk of exploitation. Additionally, restrict access to the ressources/settings.inc file to prevent unauthorized reading of the ldap admin and ldap password fields. As a temporary workaround, consider disabling the command-line field in "admin.index.php" until a patch is available.

Exploit

Correção

Insufficiently Protected Credentials

Enumeração de Fraquezas

CWE-522

Identificadores relacionados

CVE-2019-7300

Produtos afetados

Artica Proxy

Referências · 4

• 🔥 https://github.com/c610/tmp/blob/master/aRtiCE.py · Exploit
• 🔥 https://code610.blogspot.com/2019/01/rce-in-artica.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-7300 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-7300 · Aviso do Fabricante