PT-2017-3178 · Sage · Sagecrm

Published 2017-01-24 · Updated 2019-10-03 · CVE-2017-5219

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SageCRM versions 7.x through 7.3 SP2

Description The issue is related to the Component Manager functionality in SageCRM, which allows additional components to be added to the application. This functionality is vulnerable to unrestricted file upload, permitting an attacker to upload a specially crafted zip file. The zip file can contain a web shell that, when extracted, can traverse back out of the inf directory and into the SageCRM webroot, allowing remote interaction with the underlying filesystem with the highest privilege level, SYSTEM. This can lead to elevated privileges and impact the confidentiality, integrity, and availability of data.

Recommendations For SageCRM versions 7.x through 7.3 SP2, update to version 7.3 SP3 or later to resolve the issue. As a temporary workaround, consider disabling the Component Manager functionality until a patch is available. Restrict access to the inf directory to minimize the risk of exploitation. Avoid using the zip file upload feature in the Component Manager until the issue is resolved.

Fix

Path traversal

Unrestricted File Upload

Weakness Enumeration

CWE-22

CWE-434

Related Identifiers

BDU:2017-02594

CVE-2017-5219

Affected Products

Sagecrm

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2017-5219 · Security Note
• https://bdu.fstec.ru/vul/2017-02594 · Security Note
• https://osv.dev/vulnerability/CVE-2017-5219 · Vendor Advisory
• http://research.aurainfosec.io/disclosures/sagecrm-CVE-2017-5219-CVE-2017-5218 · Note
• http://securityfocus.com/bid/95968 · Note
• https://community.sagecrm.com/cfs-file.ashx/__key/telligent-evolution-components-attachments/13-206-00-00-00-02-79-71/SageCRM_5F00_7.3SP3_5F00_ReleaseNotes_5F00_EN.pdf · Note