PT-2019-4353 · Centos · Centos Web Panel

Narin Boonwasanarak + 2 · Publicado 2019-07-15 · Atualizado 2023-01-24 · CVE-2019-13383

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions CentOS Web Panel version 0.9.8.846

Description The issue is related to the login process in CentOS Web Panel, which allows attackers to determine whether a username is valid by analyzing the HTTP response. This is due to a lack of protection for internal data. An attacker could exploit this to reveal protected information.

Recommendations For version 0.9.8.846, as a temporary workaround, consider restricting access to the login process to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Side Channel Attack

Enumeração de Fraquezas

CWE-200

CWE-203

Identificadores relacionados

BDU:2020-00073

CVE-2019-13383

Produtos afetados

Centos Web Panel

Referências · 10

• 🔥 https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-13383.md · Exploit
• 🔥 https://exploit-db.com/exploits/47125 · Exploit
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010 · Nota
• http://packetstormsecurity.com/files/153667/CentOS-Control-Web-Panel-0.9.8.838-User-Enumeration.html · Nota
• https://packetstormsecurity.com/files/153667/CentOS-Control-Web-Panel-0.9.8.838-User-Enumeration.html · Nota
• https://cxsecurity.com/cveshow/CVE-2019-13383 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-13383 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-13383 · Aviso do Fabricante
• https://t.me/cvenotify/42744 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2020-00073 · Nota de Segurança