PT-2019-12774 · Ampache+1 · Ampache+1

Pablo Martinez + 1 · Published 2019-08-22 · Updated 2021-01-14 · CVE-2019-12385

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ampache versions through 3.9.1

Description An issue in the search engine allows for SQL Injection, enabling any user, including guest users, to extract data from the database, such as sessions and hashed passwords. This could lead to the compromise of admin accounts, especially when combined with the weak password generator algorithm in the lostpassword functionality.

Recommendations For Ampache versions through 3.9.1, consider restricting access to the search functionality, specifically the lib/class/search.class.php file, until a fix is available. As a temporary workaround, limit the use of the lostpassword functionality to prevent exploitation of the weak password generator algorithm.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2019-12385

DLA-1988-1

USN-4693-1

Affected Products

Ampache

Ubuntu

References · 11

• 🔥 https://tarlogic.com/en/blog/vulnerabilities-in-ampache · Exploit
• https://cve.org/CVERecord?id=CVE-2019-12385 · Security Note
• https://osv.dev/vulnerability/DLA-1988-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-12386 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4693-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-12385 · Security Note
• https://osv.dev/vulnerability/CVE-2019-12385 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-12385 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-12385 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4693-1 · Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2019/11/msg00008.html · Note