PT-2019-18669 · Elastic · Apm Agent For Python

Publicado 2019-08-22 · Atualizado 2022-05-24 · CVE-2019-7617

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Elastic APM agent for Python versions prior to 5.1.0

Description The issue arises when the Elastic APM agent for Python is run as a CGI script, and a remote attacker can control the proxy header, leading to a variable name clash flaw. This flaw could allow an attacker to redirect collected APM data to a proxy of their choosing.

Recommendations For versions prior to 5.1.0, update to version 5.1.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the proxy header to minimize the risk of exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2019-7617

GHSA-22JH-6GX8-F944

PYSEC-2019-178

Produtos afetados

Apm Agent For Python

Referências · 8

• https://github.com/elastic/apm-agent-python · Nota
• https://github.com/pypa/advisory-database/tree/main/vulns/elastic-apm/PYSEC-2019-178.yaml · Nota
• https://elastic.co/community/security · Aviso do Fabricante
• https://osv.dev/vulnerability/PYSEC-2019-178 · Aviso do Fabricante
• https://discuss.elastic.co/t/elastic-apm-agent-for-python-5-1-0-security-update/196145 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-7617 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-22jh-6gx8-f944 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-7617 · Aviso do Fabricante