PT-2014-4473 · Skybox · Skybox View Appliances

Published 2014-05-17 · Updated 2014-06-13 · CVE-2014-2084

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:C

Name of the Vulnerable Software and Affected Versions Skybox View Appliances versions 6.3.31-2.14 through 6.3.33-2.14 Skybox View Appliances versions 6.4.42-2.54 through 6.4.46-2.57

Description The issue allows remote attackers to obtain sensitive information or cause a denial of service. Attackers can send a request to API endpoints such as "scripts/commands/getSystemInformation" or "scripts/commands/getNetworkConfigurationInfo" to obtain sensitive information. Additionally, attackers can cause a denial of service by rebooting or shutting down the system via requests to "scripts/commands/reboot" or "scripts/commands/shutdown".

Recommendations For Skybox View Appliances versions 6.3.31-2.14 through 6.3.33-2.14, restrict access to the Admin interface to prevent unauthorized requests. For Skybox View Appliances versions 6.4.42-2.54 through 6.4.46-2.57, restrict access to the Admin interface to prevent unauthorized requests. As a temporary workaround, consider disabling access to the "scripts/commands/" API endpoint until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2014-2084

Affected Products

Skybox View Appliances

References · 8

• 🔥 http://exploit-db.com/exploits/33327 · Exploit
• 🔥 http://exploit-db.com/exploits/33328 · Exploit
• 🔥 https://exploit-db.com/exploits/33327 · Exploit
• 🔥 https://exploit-db.com/exploits/33328 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-2084 · Security Note
• http://osvdb.org/106842 · Note
• http://securityfocus.com/bid/67352 · Note
• https://skyboxsecurity.com/sites/default/files/file_resources/Skybox_Security_Appliance_Vulnerability.pdf · Note