PT-2018-11211 · Ocs · Ocs Inventory Ng

Juan Manuel Fernandez · Published 2018-08-03 · Updated 2018-10-02 · CVE-2018-12483

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OCS Inventory version 2.4.1

Description The issue is a remote command-execution problem. It happens because the content of the ipdiscover analyser rzo GET parameter is concatenated to a string used in an exec() call in the PHP code. To exploit this, authentication is required.

Recommendations For OCS Inventory version 2.4.1, consider restricting access to the ipdiscover analyser module to minimize the risk of exploitation. Avoid using the rzo parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2018-12483

Affected Products

Ocs Inventory Ng

References · 9

• 🔥 https://tarlogic.com/en/blog/vulnerabilities-in-ocs-inventory-2-4-1 · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-12483 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-12483 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-12483 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-12483 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-12483 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-12483 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-12483 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12483 · Note