PT-2019-11672 · Ahsay · Ahsay Cloud Backup Suite

Published 2019-07-26 · Updated 2019-07-31 · CVE-2019-10267

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Ahsay Cloud Backup Suite version 8.1.0.50

Description An issue was discovered that allows for insecure file upload and code execution. It is possible to upload a file into any directory of the server, including inserting a JSP shell into the web server's directory and executing it, leading to full access to the system as the configured user.

Recommendations For Ahsay Cloud Backup Suite version 8.1.0.50, consider restricting file upload capabilities to prevent malicious file uploads until a patch is available. As a temporary workaround, restrict access to sensitive directories on the server to minimize the risk of exploitation.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2019-10267

Affected Products

Ahsay Cloud Backup Suite

References · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/ahsay_backup_fileupload.rb · Exploit
• 🔥 https://wbsec.nl/ahsay · Exploit
• 🔥 http://packetstormsecurity.com/files/153770/Ahsay-Backup-7.x-8.x-File-Upload-Remote-Code-Execution.html · Exploit
• 🔥 http://packetstormsecurity.com/files/153771/Ahsay-Backup-7.x-8.x-File-Upload-Remote-Code-Execution.html · Exploit
• 🔥 https://exploit-db.com/exploits/47180 · Exploit
• 🔥 https://exploit-db.com/exploits/47179 · Exploit
• https://osv.dev/vulnerability/CVE-2019-10267 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-10267 · Security Note