PT-2014-4595 · Vtiger · Vtiger

Published 2014-11-16 · Updated 2017-11-20 · CVE-2014-2268

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions vTiger versions 6.0 before Security Patch 2

Description The issue is related to improper access restriction in the views/Index.php file within the Install module. This allows remote attackers to re-install the application by setting the X-Requested-With HTTP header in a request. Attackers can execute arbitrary PHP code via the db name parameter.

Recommendations For versions 6.0 before Security Patch 2, apply Security Patch 2 to resolve the issue. As a temporary workaround, consider restricting access to the views/Index.php file in the Install module to minimize the risk of exploitation. Avoid using the db name parameter in affected requests until the issue is resolved.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2014-2268

Affected Products

Vtiger

References · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/vtiger_install_rce.rb · Exploit
• 🔥 https://exploit-db.com/exploits/32794 · Exploit
• 🔥 http://exploit-db.com/exploits/32794 · Exploit
• 🔥 https://navixia.com/blog/entry/navixia-find-critical-vulnerabilities-in-vtiger-crm-cve-2014-2268-cve-2014-2269.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-2268 · Security Note
• http://vtiger-crm.2324883.n4.nabble.com/Vtigercrm-developers-IMP-forgot-password-and-re-installation-security-fix-tt9786.html · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2268 · Note
• http://securityfocus.com/bid/66757 · Note