PT-2019-12310 · Openkm · Openkm

Akkus + 1 · Published 2019-04-22 · Updated 2019-04-23 · CVE-2019-11445

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenKM versions 6.3.2 through 6.3.7

Description The issue allows an attacker to upload a malicious JSP file into the /okm:root directories and move that file to the home directory of the site. This is achieved by exploiting the Filesystem path control in the admin's Export field, specifically through the frontend/FileUpload and admin/repository export.jsp. As a result, attackers can gain remote code execution through the application server with root privileges.

Recommendations For OpenKM versions 6.3.2 through 6.3.7, consider restricting access to the frontend/FileUpload and admin/repository export.jsp endpoints to minimize the risk of exploitation. Additionally, restrict the ability to upload and move files within the /okm:root directories to prevent malicious file uploads. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2019-11445

Affected Products

Openkm

References · 5

• 🔥 https://exploit-db.com/exploits/46526 · Exploit
• 🔥 https://pentest.com.tr/exploits/OpenKM-DM-6-3-7-Remote-Command-Execution-Metasploit.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-11445 · Security Note
• https://osv.dev/vulnerability/CVE-2019-11445 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11445 · Note