PT-2019-9844 · Webgalamb · Webgalamb

Daniel Jones · Publicado 2019-03-17 · Atualizado 2019-03-22 · CVE-2018-19512

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Webgalamb versions prior to 7.0

Description A directory traversal vulnerability in system/ajax.php could lead to arbitrary code execution by authenticated administrator users, because PHP files are restored under the document root directory. The issue is related to the "wgmfile restore" functionality.

Recommendations For versions prior to 7.0, consider restricting access to the system/ajax.php endpoint, specifically the "wgmfile restore" functionality, until a patch is available. As a temporary workaround, avoid using the "wgmfile restore" feature to minimize the risk of exploitation.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2018-19512

Produtos afetados

Webgalamb

Referências · 4

• 🔥 http://seclists.org/fulldisclosure/2019/Jan/15 · Exploit
• 🔥 http://packetstormsecurity.com/files/151017/Webgalamb-Information-Disclosure-XSS-CSRF-SQL-Injection.html · Exploit
• https://osv.dev/vulnerability/CVE-2018-19512 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-19512 · Nota de Segurança