PT-2019-18519 · Artica · Artica Proxy

Code16 · Published 2019-02-01 · Updated 2020-08-24 · CVE-2019-7300

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Artica Proxy version 3.06.200056

Description The issue allows remote attackers to execute arbitrary commands as root. This is achieved by reading the ldap admin and ldap password fields from the ressources/settings.inc file, using these credentials at the "logon.php" endpoint, and then entering the commands in the "admin.index.php" command-line field.

Recommendations For Artica Proxy version 3.06.200056, consider restricting access to the "logon.php" and "admin.index.php" endpoints to minimize the risk of exploitation. Additionally, restrict access to the ressources/settings.inc file to prevent unauthorized reading of the ldap admin and ldap password fields. As a temporary workaround, consider disabling the command-line field in "admin.index.php" until a patch is available.

Exploit

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2019-7300

Affected Products

Artica Proxy

References · 4

• 🔥 https://github.com/c610/tmp/blob/master/aRtiCE.py · Exploit
• 🔥 https://code610.blogspot.com/2019/01/rce-in-artica.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-7300 · Security Note
• https://osv.dev/vulnerability/CVE-2019-7300 · Vendor Advisory