PT-2017-18695 · Allen · Allen Disk

Ghost · Published 2017-05-19 · Updated 2020-03-02 · CVE-2017-9091

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Allen Disk version 1.6

Description The issue concerns a CAPTCHA bypass in the login functionality. Specifically, the /admin/loginc.php endpoint does not properly check if the CAPTCHA code has been set, allowing for bypass by emptying the captcha field in the POST request. This can be achieved by manipulating the $ POST['captcha'] variable.

Recommendations For Allen Disk version 1.6, consider implementing a proper check for the CAPTCHA code to prevent bypass. As a temporary workaround, restrict access to the /admin/loginc.php endpoint until a proper fix is implemented. Additionally, ensure that the $ SESSION['captcha']['code'] variable is properly validated to prevent unauthorized access.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2017-9091

Affected Products

Allen Disk

References · 3

• https://github.com/s3131212/allendisk/issues/23 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2017-9091 · Security Note
• https://osv.dev/vulnerability/CVE-2017-9091 · Vendor Advisory