PT-2019-14333 · Unknown · Bloodhound

6661620A · Published 2019-08-27 · Updated 2019-08-30 · CVE-2019-15701

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BloodHound version 2.2.0

Description The issue allows remote attackers to execute arbitrary OS commands on the victim's machine when the search function's autocomplete feature is used in a specific scenario. This scenario involves the victim importing data from an Active Directory that contains a Group Policy Object (GPO) with JavaScript in its name.

Recommendations For BloodHound version 2.2.0, consider disabling the autocomplete feature in the search function as a temporary workaround until a patch is available. Restrict access to importing data from Active Directory to minimize the risk of exploitation. Avoid using the autocomplete feature when importing data that may contain malicious JavaScript code in GPO names.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2019-15701

Affected Products

Bloodhound

References · 3

• 🔥 https://github.com/BloodHoundAD/BloodHound/issues/267 · Exploit
• https://osv.dev/vulnerability/CVE-2019-15701 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-15701 · Security Note