PT-2018-11519 · Benoit Chesneau+2 · Unicorn+3

Published 2018-02-06 · Updated 2018-03-13 · CVE-2018-1299

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache Allura versions prior to 1.8.0

Description The issue allows unauthenticated attackers to retrieve arbitrary files through the Allura web application. The success of the attack may depend on the web server used with Allura, with some configurations such as Nginx, Apache/mod wsgi, or paster potentially preventing the attack, while others like gunicorn do not prevent it.

Recommendations For Apache Allura versions prior to 1.8.0, update to version 1.8.0 or later to resolve the issue. As a temporary workaround, consider using a web server configuration that prevents the attack, such as Nginx, Apache/mod wsgi, or paster, until the update can be applied.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2018-1299

Affected Products

Apache

Apache Allura

Nginx

Unicorn

References · 4

• https://osv.dev/vulnerability/CVE-2018-1299 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1299 · Security Note
• https://allura.apache.org/posts/2018-allura-1.8.0.html · Vendor Advisory
• https://lists.apache.org/thread.html/b52069073cf3cb0f84c9e1e2b34d411fc163af39e4f3e50712ac8a4d%40%3Cdev.allura.apache.org%3E · Note