PT-2023-6524 · Apache+3 · Apache Axis+3

Letian Yuan · Publicado 2023-09-05 · Atualizado 2024-08-02 · CVE-2023-40743

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apache Axis versions prior to 1.4

Description The issue arises from insufficient input validation in the implementation of the Apache Axis web service platform, allowing potentially dangerous lookup mechanisms such as LDAP when looking up a service through ServiceFactory.getService. Passing untrusted input to this API method could expose the application to Denial of Service (DoS), Server-Side Request Forgery (SSRF), and even attacks leading to Remote Code Execution (RCE).

Recommendations As a temporary workaround, consider reviewing your code to verify no untrusted or unsanitized input is passed to ServiceFactory.getService. Migrate to a different SOAP engine, such as Apache Axis 2/Java, to fully resolve the issue. Apply the patch from https://github.com/apache/axis-axis1-java/commit/7e66753427466590d6def0125e448d2791723210 as an alternative workaround.

Correção

RCE

DoS

Enumeração de Fraquezas

CWE-20

CWE-75

Identificadores relacionados

BDU:2023-07271

CVE-2023-40743

DLA-3622-1

GHSA-RMQP-9W4C-GC7W

USN-6470-1

Produtos afetados

Apache Axis

Astra Linux

Linuxmint

Ubuntu

Referências · 26

• https://github.com/apache/axis-axis1-java · Nota
• https://github.com/apache/axis-axis1-java/commit/7e66753427466590d6def0125e448d2791723210 · Correção
• https://twitter.com/CVEnew/status/1699073216109752450 · Publicação no Twitter
• https://twitter.com/CCBalert/status/1752692394011582555 · Publicação no Twitter
• https://ubuntu.com/security/CVE-2023-40743 · Aviso do Fabricante
• https://twitter.com/oss_security/status/1699069262793728084 · Publicação no Twitter
• https://lists.debian.org/debian-lts-announce/2023/10/msg00025.html · Nota
• https://cve.org/CVERecord?id=CVE-2023-40743 · Nota de Segurança
• https://xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.10 · Nota
• https://osv.dev/vulnerability/USN-6470-1 · Aviso do Fabricante
• https://lists.apache.org/thread/gs0qgk2mgss7zfhzdd6ftfjvm4kp7v82 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2023-07271 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-rmqp-9w4c-gc7w · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-40743 · Nota de Segurança
• https://t.me/cibsecurity/69856 · Publicação no Telegram