PT-2018-9762 · Honeynet · Glastopf

Loveraven42 · Published 2018-04-19 · Updated 2024-08-05 · CVE-2018-10220

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Glastopf version 3.1.3-dev

Description: The issue concerns a Server-Side Request Forgery (SSRF) in Glastopf, demonstrated through the abc.php a parameter. It is noted that the vendor considers this behavior intentional, as Glastopf is a web application honeypot. The product includes modules for emulation, such as Remote File Inclusion, which is supported by the rfi.py file in the modules/handlers/emulators directory.

Recommendations: For Glastopf version 3.1.3-dev, consider restricting access to the abc.php endpoint to minimize the risk of exploitation, as the SSRF behavior is considered part of the honeypot's intentional functionality.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2018-10220

Affected Products

Glastopf

References · 3

• 🔥 https://github.com/mushorg/glastopf/issues/286 · Exploit
• https://osv.dev/vulnerability/CVE-2018-10220 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-10220 · Security Note