PT-2017-2829 · Orientdb · Orientdb

Published 2017-06-19 · Updated 2024-02-14 · CVE-2017-11467

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OrientDB versions prior to 2.2.22

Description The issue is related to insufficient access control in certain functions, specifically where, fetchplan, and order by. This allows remote attackers to execute arbitrary OS commands via a crafted request. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

Recommendations For OrientDB versions prior to 2.2.22, update to a version that enforces privilege requirements during the use of where, fetchplan, or order by to prevent the execution of arbitrary OS commands. As a temporary workaround, consider restricting access to these functions to minimize the risk of exploitation.

Exploit

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

CWE-264

Related Identifiers

BDU:2017-02109

CVE-2017-11467

GHSA-XM6R-4466-MR74

Affected Products

Orientdb

References · 11

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/orientdb_exec.rb · Exploit
• 🔥 http://heavensec.org/?p=1703 · Exploit
• 🔥 https://exploit-db.com/exploits/44068 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-11467 · Security Note
• https://osv.dev/vulnerability/GHSA-xm6r-4466-mr74 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-02109 · Security Note
• https://osv.dev/vulnerability/CVE-2017-11467 · Vendor Advisory
• https://github.com/orientechnologies/orientdb/wiki/OrientDB-2.2-Release-Notes#2223---july-11-2017 · Note
• https://github.com/orientechnologies/orientdb · Note
• https://web.archive.org/web/20210403135751/http://heavensec.org/?p=1703 · Note
• https://github.com/advisories/GHSA-xm6r-4466-mr74 · Note