PT-2019-14880 · Enghouse · Enghouse Web Chat

Published 2019-11-13 · Updated 2019-11-18 · CVE-2019-16948

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Enghouse Web Chat version 6.1.300.31

Description A Server-Side Request Forgery (SSRF) issue allows an attacker to determine what is visible on the internal network by replacing the port number in the WebServiceLocation parameter of a POST request. The response from open ports differs from that of closed ports, enabling the attacker to identify open ports. The product only allows HTTP or HTTPS protocols, and any other protocol will result in an error that can be used to determine if a port is open.

Recommendations For Enghouse Web Chat version 6.1.300.31, consider restricting access to the WebServiceLocation parameter to minimize the risk of exploitation. As a temporary workaround, restrict the ability to modify the port number in the WebServiceLocation parameter to prevent internal network scanning. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2019-16948

Affected Products

Enghouse Web Chat

References · 3

• 🔥 https://mjlanders.com/2019/11/07/multiple-vulnerabilities-found-in-enghouse-zeacom-web-chat · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-16948 · Security Note
• https://osv.dev/vulnerability/CVE-2019-16948 · Vendor Advisory